OL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000013c0)={0x0, 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x0) 01:49:01 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 01:49:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d5", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:01 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b8e22d5b51d1a09e9b53111ce1a2188488f18b"}) dup(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) 01:49:01 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote}}) [ 731.329531][T10330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:01 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x40}, 0x10) [ 731.517245][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:01 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b8e22d5b51d1a09e9b53111ce1a2188488f18b"}) dup(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, 0x0) 01:49:01 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d5", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:01 executing program 2: bpf$BPF_MAP_GET_NEXT_ID(0x22, &(0x7f0000000080)={0xfffffa13}, 0x8) 01:49:01 executing program 5: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) [ 731.925379][T10345] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 732.056830][T10349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:02 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x20) 01:49:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:02 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b8e22d5b51d1a09e9b53111ce1a2188488f18b"}) dup(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 01:49:02 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:02 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x48) 01:49:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xa, &(0x7f0000000100), 0x4) [ 732.420977][T10355] 9pnet_fd: Insufficient options for proto=fd 01:49:02 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b8e22d5b51d1a09e9b53111ce1a2188488f18b"}) dup(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 01:49:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:02 executing program 4: eventfd(0x80) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0) 01:49:02 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 01:49:02 executing program 5: openat$full(0xffffffffffffff9c, &(0x7f0000001480), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0, 0x0) [ 732.657559][T10364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 732.838693][T10365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 732.938866][T10371] 9pnet_fd: Insufficient options for proto=fd 01:49:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:03 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b8e22d5b51d1a09e9b53111ce1a2188488f18b"}) dup(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}}) 01:49:03 executing program 2: socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) [ 733.369244][T10379] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 733.496796][T10385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 733.535778][T10384] 9pnet_fd: Insufficient options for proto=fd 01:49:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:03 executing program 2: pselect6(0xfffffffffffffc1d, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000040), 0x0) 01:49:03 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b8e22d5b51d1a09e9b53111ce1a2188488f18b"}) r1 = dup(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}}) 01:49:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:04 executing program 5: getgroups(0xa, &(0x7f0000000180)) 01:49:04 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @broadcast, @val, {@ipv4}}, 0x0) [ 733.991692][T10391] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:04 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8) [ 734.099937][T10393] 9pnet_fd: Insufficient options for proto=fd 01:49:04 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b8e22d5b51d1a09e9b53111ce1a2188488f18b"}) r1 = dup(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}}) 01:49:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:04 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @val, {@ipv6}}, 0x0) 01:49:04 executing program 4: syz_emit_ethernet(0x6e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6003ede800382b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa33040000fa0000000001009078000000006026620600000000fe8000000000000000000000000000bbfb"], 0x0) 01:49:04 executing program 2: mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') [ 734.660111][T10404] 9pnet_fd: Insufficient options for proto=fd 01:49:04 executing program 0: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "b8e22d5b51d1a09e9b53111ce1a2188488f18b"}) r1 = dup(r0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}}) 01:49:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:05 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @random="e80bb7d3c0e4", @val, {@ipv6}}, 0x0) 01:49:05 executing program 4: mknod(&(0x7f0000000080)='./file0\x00', 0x8000, 0xe02) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 01:49:05 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="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", 0x801}], 0x1, &(0x7f0000000240)=[@cred], 0x20}, 0x0) 01:49:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) [ 735.206601][T10417] 9pnet_fd: Insufficient options for proto=fd 01:49:05 executing program 0: syz_emit_ethernet(0x52, &(0x7f0000002740)={@local, @random="8ba0eb8af1e2", @val, {@ipv6}}, 0x0) 01:49:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:05 executing program 5: syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @broadcast, @val, {@ipv6}}, 0x0) 01:49:05 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f00000007c0)={&(0x7f0000000180)=@un=@file={0x0, './file0\x00'}, 0xfffffd14, 0x0}, 0x0) 01:49:05 executing program 2: socketpair(0x0, 0xb, 0x0, &(0x7f0000000040)) 01:49:05 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x2}, @func]}}, &(0x7f0000000240)=""/139, 0x32, 0x8b, 0x1}, 0x20) 01:49:05 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x14, 0x4, 0x8, 0xa, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, 0x0, &(0x7f0000000400)=""/4096}, 0x20) 01:49:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:06 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x130, 0x0, 0x1}, 0x48) 01:49:06 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x3}, {}]}]}, {0x0, [0x0, 0x0, 0x5f]}}, &(0x7f0000000340)=""/205, 0x39, 0xcd, 0x1}, 0x20) [ 736.301161][T10447] __nla_validate_parse: 5 callbacks suppressed [ 736.301232][T10447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:06 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x4, 0x0, {0x0, 0x2000000, 0x100000}}]}}, &(0x7f0000000240)=""/139, 0x32, 0x8b, 0x1}, 0x20) 01:49:06 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)='\"', 0x1}, {0x0}, {&(0x7f0000000240)='C', 0x1}], 0x3}, 0x0) [ 736.442020][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:06 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000002600)=ANY=[@ANYBLOB="d4eabd1831f7"], &(0x7f0000000440)=""/170, 0x32, 0xaa, 0x1}, 0x20) 01:49:06 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:06 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48) 01:49:06 executing program 0: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000380)) 01:49:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x8, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x300}, 0x48) 01:49:06 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:07 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0xa, 0x2, 0x1}, 0x48) [ 736.983763][T10461] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:07 executing program 2: fchmodat(0xffffffffffffffff, 0x0, 0x0) 01:49:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001ac0)={&(0x7f0000000140)=ANY=[], 0xa, &(0x7f0000001800)=[{&(0x7f0000000180)="6159119c8b35340a6177baae938e352f00518479e469ca10a0d62ffa0459b75f133b62fe964707f519cf26b6c74b6e267833129d5662d9b0e173ef61891449be5343eeb4d20e96d63674583cee263ba4d98ee857f9617263db09f4dc1ad33e788b343f07923f4021a1da7243f72426774cc6db62d47f8f447d1bf77fb85d955181e0349437f7a479", 0x88}, {&(0x7f0000000800)="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", 0x779}, {0x0}], 0x3}, 0x0) 01:49:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:07 executing program 5: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x408}}}}}}}]}}, 0x0) 01:49:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:07 executing program 4: readlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) 01:49:07 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001800)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="af", 0x1}], 0x4}, 0x0) 01:49:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="d3", 0x1}], 0x1}, 0x0) [ 737.763802][T10482] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:08 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:08 executing program 4: syz_clone(0x24108000, 0x0, 0x5, 0x0, 0x0, 0x0) [ 738.022839][ T3563] usb 6-1: new high-speed USB device number 10 using dummy_hcd 01:49:08 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f00000000c0), &(0x7f00000001c0)=""/94, &(0x7f0000000280), &(0x7f0000000400), 0x6, r0}, 0x38) 01:49:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x57a, r0}, 0x38) [ 738.262638][ T3563] usb 6-1: Using ep0 maxpacket: 8 [ 738.314041][T10494] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 738.383420][ T3563] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1032, setting to 1024 01:49:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) [ 738.383577][ T3563] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 738.383717][ T3563] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 738.383832][ T3563] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 01:49:08 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x48) [ 738.563131][ T3563] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 738.563274][ T3563] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.563394][ T3563] usb 6-1: Product: syz [ 738.563480][ T3563] usb 6-1: Manufacturer: syz [ 738.563567][ T3563] usb 6-1: SerialNumber: syz [ 738.853223][ T3563] cdc_ncm 6-1:1.0: bind() failure [ 738.863188][ T3563] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 738.863322][ T3563] cdc_ncm 6-1:1.1: bind() failure [ 738.962459][ T3563] usb 6-1: USB disconnect, device number 10 01:49:09 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x42, 0x0, 0x80, 0x2}]}}, &(0x7f0000000200)=""/186, 0x2a, 0xba, 0x1}, 0x20) 01:49:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5}}]}}, &(0x7f00000002c0)=""/229, 0x32, 0xe5, 0x1}, 0x20) 01:49:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 01:49:09 executing program 0: syz_clone(0x200c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 01:49:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:09 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f00000005c0)=@framed={{}, [@jmp={0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:49:09 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r0}, 0x38) [ 739.480817][T10514] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:09 executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000200)=""/186, 0x26, 0xba, 0x1}, 0x20) close(r0) 01:49:09 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, &(0x7f00000001c0)=""/94, &(0x7f0000000280), &(0x7f0000000400), 0x6, r0}, 0x38) 01:49:09 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 01:49:09 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x6, 0x4, 0x1, 0x7, 0x800, 0x1}, 0x48) 01:49:10 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x1}, 0x1c) 01:49:10 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto(r0, &(0x7f0000000100)="82", 0x1, 0x20104, &(0x7f0000000000)=@in6={0x1c, 0x1c}, 0x1c) 01:49:10 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x83a2b3c122922562, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) 01:49:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) [ 740.103098][T10529] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:10 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) 01:49:10 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) 01:49:10 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x10) 01:49:10 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 01:49:10 executing program 5: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup(r0) setsockopt$sock_timeval(r1, 0xffff, 0x1005, &(0x7f0000000000), 0x10) 01:49:10 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:10 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x7fff, 0x1, "83"}, 0x9) [ 740.817638][T10550] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:11 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000300)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x10, 0x2}, 0x10) 01:49:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:49:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:11 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) 01:49:11 executing program 5: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, 0x0}, 0x0) 01:49:11 executing program 2: r0 = socket$inet6_tcp(0x1c, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in6={0x1c, 0x1c, 0x2}, 0x1c) 01:49:11 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) pselect6(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) [ 741.448820][T10570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:11 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:11 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x1a, &(0x7f0000000000), 0x8) 01:49:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:49:12 executing program 0: r0 = socket(0x1c, 0x10000001, 0x84) r1 = dup2(r0, r0) sendto(r1, &(0x7f0000000400)="9b", 0x1, 0x0, &(0x7f0000000080)=@in6={0x1c, 0x1c}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x1203, &(0x7f0000000580)=ANY=[], 0x3ef) 01:49:12 executing program 4: clock_nanosleep(0x0, 0x0, &(0x7f0000000240)={0x0, 0x5f1}, &(0x7f0000000280)) 01:49:12 executing program 2: r0 = socket(0x2, 0x10000001, 0x84) setsockopt$inet_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) 01:49:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:12 executing program 5: syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c0f4fd00140000000000000000002b0000000000000000ff02"], 0x0) [ 742.275177][T10594] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:12 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000140)="b0", 0x1, 0x20104, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) 01:49:12 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/194, 0xc2}, 0x40042) 01:49:12 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200), 0x88) 01:49:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 01:49:12 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:12 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000001440)={0x10, 0x2}, 0x10) 01:49:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0x1c, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x22, &(0x7f0000000100), 0xc) 01:49:13 executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x0) link(&(0x7f00000006c0)='./file0\x00', 0x0) [ 743.076219][T10617] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:13 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200), &(0x7f0000000100)=0x98) 01:49:13 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x10, &(0x7f0000000000)=0x8, 0x4) 01:49:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:13 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 01:49:13 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x1, 0x0) dup2(r0, r1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x19, &(0x7f0000000040), &(0x7f0000000140)=0x8) 01:49:13 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0x1c, 0x1, 0x0) r2 = dup2(r0, r1) connect$inet(r2, &(0x7f0000000080)={0x10, 0x2}, 0x10) 01:49:13 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) 01:49:13 executing program 5: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000003c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200), 0x88) [ 743.804332][T10635] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:14 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000ac0), &(0x7f0000000b80)=0x98) 01:49:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0x0, 0x0) 01:49:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 01:49:14 executing program 2: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000003c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockname(r0, 0x0, &(0x7f0000000980)) 01:49:14 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000200)='\x00', 0x1, 0x0, &(0x7f00000002c0)={0x10, 0x2}, 0x10) 01:49:14 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f0000000200)=@in6={0x1c, 0x1c, 0x1}, 0x1c) [ 744.357196][T10652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0x0, 0x0) 01:49:14 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000840)={&(0x7f0000000000)=@in={0x10, 0x2}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@init={0x14}, @dstaddrv4={0x10, 0x84, 0x9, @local={0xac, 0x14, 0x0}}], 0x24}, 0x0) 01:49:14 executing program 5: r0 = socket(0x2, 0x10000001, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x3}, 0x1c) 01:49:14 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f0000000040)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@prinfo={0x14}], 0x14}, 0x0) 01:49:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 01:49:15 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000400)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0xa, &(0x7f0000000280)={0x0, @in, 0x0, 0x0, 0x301}, 0x98) 01:49:15 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) [ 745.030356][T10675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, 0x0, 0x0) 01:49:15 executing program 5: r0 = socket(0x2, 0x3, 0x0) r1 = socket(0x1c, 0x10000001, 0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x1203, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES64=r0], 0x3ef) sendmsg$inet_sctp(r1, &(0x7f0000000500)={&(0x7f0000000200)=@in6={0x1c, 0x1c, 0x2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000280)="05", 0x1}], 0x1}, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="bf", 0x1}], 0x1}, 0x0) 01:49:15 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f0000000340)={0x10}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x105, &(0x7f0000000240)=ANY=[@ANYBLOB="04", @ANYRES32=0x0], &(0x7f0000000200)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000040), &(0x7f0000000180)=0x8) 01:49:15 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:15 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) bind(r0, &(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c) 01:49:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:49:15 executing program 0: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000003c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7, &(0x7f0000000580), &(0x7f0000000140)=0x88) 01:49:15 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000200), &(0x7f0000000000)=0x98) [ 745.898961][T10695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:16 executing program 5: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000003c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000004c0)="10", 0x1}], 0x1, &(0x7f00000007c0)=[@init={0x14}, @authinfo={0x10}], 0x24}, 0x0) 01:49:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:49:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:16 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0xa) 01:49:16 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000580)={&(0x7f0000000140)=@in6={0x1c, 0x1c, 0x1}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@sndrcv={0x2c}], 0x2c}, 0x0) 01:49:16 executing program 2: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) r1 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000002800), &(0x7f0000000140)=0x4) 01:49:16 executing program 5: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000003c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x7fff, 0x1, "83"}, 0x9) [ 746.535269][T10712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 01:49:16 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000003c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x13, &(0x7f00000001c0), 0x8) 01:49:16 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:17 executing program 5: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000003c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f00000000c0), 0x98) 01:49:17 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x1d, &(0x7f0000000180), 0x8) 01:49:17 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) connect$inet6(r0, &(0x7f00000000c0)={0x1c, 0x1c, 0x2}, 0x1c) recvmsg(r0, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/99, 0x63}, 0x0) 01:49:17 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000001480)={0x10, 0x2}, 0x10) 01:49:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) [ 747.253274][T10733] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:17 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) recvmsg(r0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001800), 0x8) write$cgroup_pressure(0xffffffffffffffff, &(0x7f00000017c0)={'full', 0x20, 0x0, 0x20, 0xb}, 0x2f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a00)=@bpf_lsm={0x1d, 0xa, &(0x7f0000001840)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3ff}, @initr0, @map_val, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001900)={0x2, 0x0, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[0x1, 0xffffffffffffffff]}, 0x80) 01:49:17 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x2}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:49:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) 01:49:17 executing program 0: r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) bind(r0, &(0x7f00000000c0)=@un=@abs={0x8}, 0x8) 01:49:17 executing program 4: r0 = socket(0x2, 0x10000001, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={&(0x7f00000003c0)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x100) [ 747.879606][T10751] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:18 executing program 5: mmap(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x2, 0x1010, 0xffffffffffffffff, 0x0) 01:49:18 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x21, &(0x7f0000000140), 0x10) 01:49:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x5c}}, 0x0) 01:49:18 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:18 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x2, &(0x7f0000000280), 0x4) 01:49:18 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:49:18 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:49:18 executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72000000}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:49:18 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2], 0x5c}}, 0x0) [ 748.714818][T10774] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:18 executing program 5: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x5, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x94}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:49:18 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f00000001c0)=@framed={{}, [@call]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xde, &(0x7f0000000080)=""/222, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:49:19 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r0, 0xc0984124, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 01:49:19 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r0, 0x40044104, 0x0) 01:49:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) [ 749.054858][T10783] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2], 0x5c}}, 0x0) 01:49:19 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat6\x00') read$alg(r0, 0x0, 0x0) 01:49:19 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) 01:49:19 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000580), &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={[{@size}]}) 01:49:19 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='net/netlink\x00') read$watch_queue(r0, &(0x7f0000000200)=""/4096, 0x1000) [ 749.406181][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 749.578474][T10800] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:19 executing program 5: socketpair(0x26, 0x5, 0x0, &(0x7f0000000280)) 01:49:19 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2], 0x5c}}, 0x0) [ 749.623116][T10802] binder: 10799:10802 ioctl c0306201 20001480 returned -14 [ 749.656747][T10804] tmpfs: Bad value for 'size' 01:49:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:19 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='environ\x00') read$alg(r0, 0x0, 0x7ffffffff000) 01:49:19 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x80045530, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "1c2a49396320ad0a05d301c66830314a"}) 01:49:19 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000280)=0x1000000, 0x4) 01:49:20 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0x40086602, 0x0) [ 750.072641][T10811] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:20 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0x80045530, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x0, "1c2a49396320ad0a05d301c66830314a"}) [ 750.101281][T10817] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB], 0x5c}}, 0x0) 01:49:20 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r0, 0x127d, 0x0) 01:49:20 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x1278, &(0x7f0000000100)) 01:49:20 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:20 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x127b, &(0x7f0000000100)) 01:49:20 executing program 0: r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='#\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) 01:49:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x9, 0x4) 01:49:20 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') read$alg(r0, 0x0, 0x0) [ 750.644829][T10828] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB], 0x5c}}, 0x0) 01:49:21 executing program 5: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000100)) 01:49:21 executing program 0: r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x4) 01:49:21 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') read$alg(r0, &(0x7f00000005c0)=""/4096, 0x1000) 01:49:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x4, &(0x7f0000000280)=0x7, 0x4) 01:49:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB], 0x5c}}, 0x0) 01:49:21 executing program 0: r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 01:49:21 executing program 5: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={[{}, {@huge_always}], [{@seclabel}]}) 01:49:21 executing program 2: clock_getres(0xd, 0x0) 01:49:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x25, &(0x7f0000000280)=0xffffffffffffffff, 0x4) 01:49:21 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a14000100"], 0x5c}}, 0x0) 01:49:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) [ 751.704300][T10856] tmpfs: Unknown parameter 'seclabel' 01:49:21 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='cmdline\x00') read$alg(r0, 0x0, 0x0) 01:49:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x1260, &(0x7f0000000100)) 01:49:22 executing program 2: add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) [ 751.905719][T10861] TCP: TCP_TX_DELAY enabled 01:49:22 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc0884123, 0x0) [ 752.039224][T10864] __nla_validate_parse: 4 callbacks suppressed [ 752.039381][T10864] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a14000100"], 0x5c}}, 0x0) [ 752.093523][T10865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:22 executing program 0: syz_80211_inject_frame(&(0x7f0000000200)=@device_b, 0x0, 0x0) 01:49:22 executing program 5: add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000080)='x', 0x1, 0xfffffffffffffffd) 01:49:22 executing program 2: add_key(&(0x7f0000000100)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000000)='d', 0x1, 0xfffffffffffffffc) 01:49:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:22 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) [ 752.504568][T10876] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a14000100"], 0x5c}}, 0x0) [ 752.576794][T10878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 01:49:22 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x1e, &(0x7f0000000280)=0xffffffffffffffff, 0x4) 01:49:22 executing program 5: process_vm_writev(0x0, &(0x7f0000002700)=[{&(0x7f0000000140)=""/25, 0x19}], 0x1, &(0x7f00000027c0)=[{&(0x7f0000002740)=""/96, 0x60}], 0x1, 0x0) [ 752.724644][T10885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:22 executing program 4: syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x10800, &(0x7f0000000840)=ANY=[]) 01:49:23 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000000300)) [ 752.931958][T10889] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x44, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x8, 0x4, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}]}]}]}}]}, 0x44}}, 0x0) 01:49:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc0400004631"], 0x5c}}, 0x0) 01:49:23 executing program 5: r0 = fsopen(&(0x7f0000000100)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 01:49:23 executing program 2: r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='tracefs\x00', &(0x7f0000000080)='%(+\xc8:%:\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 01:49:23 executing program 4: add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000140)="92", 0x1, 0xfffffffffffffffb) 01:49:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/icmp6\x00') read$alg(r0, 0x0, 0x0) [ 753.355008][T10901] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 753.376883][T10900] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc0400004631"], 0x5c}}, 0x0) 01:49:23 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x0, 0x0) read$snddsp(r0, 0x0, 0x0) 01:49:23 executing program 4: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x2, &(0x7f0000000800)=[{&(0x7f0000000280)='*', 0x1, 0x10001}, {&(0x7f00000004c0)='c', 0x1, 0x100000001}], 0x0, 0x0) 01:49:23 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 01:49:23 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_targets\x00') read$alg(r0, 0x0, 0x7ffffffff000) [ 753.775512][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:23 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc0400004631"], 0x5c}}, 0x0) 01:49:23 executing program 2: syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)) [ 754.044403][T10917] loop4: detected capacity change from 0 to 256 01:49:24 executing program 5: sysfs$2(0x2, 0xfffffffffffffffe, 0x0) 01:49:24 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/dev\x00') read$alg(r0, &(0x7f00000005c0)=""/4096, 0x1000) read$alg(r0, 0x0, 0x0) 01:49:24 executing program 0: syz_open_dev$loop(0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) [ 754.163077][T10924] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 754.167095][T10919] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:24 executing program 2: setgid(0xee00) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_names\x00') 01:49:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c"], 0x5c}}, 0x0) 01:49:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 01:49:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x10, &(0x7f0000000280)=0xffffffffffffffff, 0x4) 01:49:24 executing program 2: setgid(0xee00) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_names\x00') 01:49:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/prev\x00') read$alg(r0, &(0x7f00000005c0)=""/4096, 0x1000) 01:49:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c"], 0x5c}}, 0x0) [ 754.909286][T10937] binder: 10936:10937 ioctl c0306201 20001480 returned -14 01:49:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:25 executing program 4: timer_create(0x0, &(0x7f0000000040)={0x0, 0x0, 0x4}, 0x0) 01:49:25 executing program 2: setgid(0xee00) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_names\x00') 01:49:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c"], 0x5c}}, 0x0) 01:49:25 executing program 0: r0 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)=':\x00', &(0x7f0000000040)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 01:49:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}}, 0x24}}, 0x0) 01:49:25 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00') read$alg(r0, &(0x7f0000000140)=""/150, 0x96) 01:49:25 executing program 2: setgid(0xee00) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_tables_names\x00') [ 755.444693][T10954] binder: 10952:10954 ioctl c0306201 20001480 returned -14 01:49:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:25 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c"], 0x5c}}, 0x0) 01:49:25 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00') read$alg(r0, &(0x7f0000000140)=""/150, 0x96) 01:49:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x8, &(0x7f0000000280)=0x3c00, 0x4) [ 755.930094][T10967] binder: 10965:10967 ioctl c0306201 20001480 returned -14 01:49:26 executing program 2: syz_mount_image$tmpfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000016c0), 0x0, &(0x7f0000001780)={[{}, {@huge_always}], [{@seclabel}]}) 01:49:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 01:49:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c"], 0x5c}}, 0x0) 01:49:26 executing program 0: syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={[{@nr_inodes={'nr_inodes', 0x3d, [0x65]}}]}) 01:49:26 executing program 4: add_key(&(0x7f0000000240)='dns_resolver\x00', 0x0, &(0x7f00000003c0)="2be2", 0x2, 0xffffffffffffffff) 01:49:26 executing program 2: syz_clone(0xd24c13bce8e47179, 0x0, 0x0, 0x0, 0x0, 0x0) [ 756.394614][T10978] binder: 10977:10978 ioctl c0306201 20001480 returned -14 01:49:26 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c"], 0x5c}}, 0x0) 01:49:26 executing program 0: syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0xa43) 01:49:26 executing program 2: add_key(&(0x7f0000000000)='keyring\x00', 0x0, &(0x7f0000000140)="b0", 0x1, 0xfffffffffffffffb) 01:49:26 executing program 4: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x80081270, &(0x7f0000000100)) [ 756.833689][T10992] binder: 10991:10992 ioctl c0306201 20001480 returned -14 [ 756.834683][T10992] binder_alloc: 10991: binder_alloc_buf, no vma 01:49:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 01:49:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c00"], 0x5c}}, 0x0) 01:49:27 executing program 2: syz_open_dev$sndpcmp(&(0x7f0000001f80), 0x0, 0x240) 01:49:27 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x10, 0x0, "3e3cf9e63c15310bb321e5521fc1279fd593ac75b7091ed230c58850d24cfaab91019e2bafa98fdff5dd8bc1cd8a381e07bc519028a6f5cbbc41d34269fe3cb65f7f8d4e17c4e8d4a2e40d4e6edb534f"}, 0xd8) 01:49:27 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000180)={0x0, [[0x1f], [0x400], [0xcaf]]}) [ 757.351520][T11004] binder: 11001:11004 ioctl c0306201 20001480 returned -14 [ 757.367989][T11005] __nla_validate_parse: 6 callbacks suppressed [ 757.368060][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:27 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 757.398839][T11004] binder_alloc: 11001: binder_alloc_buf, no vma 01:49:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 01:49:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c00"], 0x5c}}, 0x0) 01:49:27 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000580)='cmdline\x00') read$alg(r0, &(0x7f0000000140)=""/150, 0x96) 01:49:27 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x4402) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 01:49:27 executing program 4: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000002700)=[{&(0x7f0000000140)=""/25, 0x19}], 0x1, &(0x7f00000027c0)=[{&(0x7f0000002740)=""/96, 0x60}], 0x1, 0x0) [ 757.857412][T11016] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 757.955227][T11025] binder: 11020:11025 ioctl c0306201 20001480 returned -14 [ 757.979111][T11025] binder_alloc: 11020: binder_alloc_buf, no vma 01:49:28 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}, @func_proto]}}, &(0x7f0000000040)=""/252, 0x3e, 0xfc, 0x1}, 0x20) 01:49:28 executing program 2: r0 = syz_open_dev$loop(&(0x7f00000003c0), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x4c04, &(0x7f0000000100)) 01:49:28 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c00"], 0x5c}}, 0x0) 01:49:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x38, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) 01:49:28 executing program 4: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) io_setup(0xffff, &(0x7f0000000100)) 01:49:28 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef84) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 01:49:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) sendfile(r2, r0, 0x0, 0x4000000) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) [ 758.487954][T11039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:28 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:28 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:28 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x38, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) [ 758.730830][ T25] audit: type=1800 audit(1655862568.783:19): pid=11044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1173 res=0 errno=0 [ 758.754330][ T25] audit: type=1804 audit(1655862568.793:20): pid=11044 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3152464667/syzkaller.tEdfXk/557/file0" dev="sda1" ino=1173 res=1 errno=0 01:49:29 executing program 4: syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) io_setup(0xffff, &(0x7f0000000100)) [ 759.116583][T11056] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 759.116650][T11056] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 759.116719][T11056] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 759.116775][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:29 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 759.223955][T11058] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000140)={0x3, 0x0, [{}, {0xa, 0x4}, {0x7, 0x0, 0x20}]}) 01:49:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x38, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x0) [ 759.665846][T11062] binder: BINDER_SET_CONTEXT_MGR already set [ 759.665887][T11062] binder: 11060:11062 ioctl 4018620d 20000000 returned -16 01:49:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x7c774aac) socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x7fffffff) sendfile(r2, r0, 0x0, 0x4000000) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda, 0x6e01}, 0x3f00) [ 759.721077][T11063] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 759.721149][T11063] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 759.721206][T11063] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 759.721264][T11063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:29 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 759.938874][T11070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 01:49:30 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0xef84) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 01:49:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:30 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000240)=0xffffffff, 0x4) 01:49:30 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x4}]}]}}]}, 0x3c}}, 0x0) [ 760.136539][T11072] binder: 11071:11072 ioctl c0306201 20001480 returned -14 01:49:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 760.363106][T11076] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 760.363182][T11076] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 760.363241][T11076] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 760.363298][T11076] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:30 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef84) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 01:49:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:30 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@register_looper, @enter_looper], 0x0, 0x0, 0x0}) [ 760.478509][T11082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 760.624434][ T25] audit: type=1800 audit(1655862570.683:21): pid=11088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1156 res=0 errno=0 [ 760.630395][ T25] audit: type=1804 audit(1655862570.683:22): pid=11088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3152464667/syzkaller.tEdfXk/558/file0" dev="sda1" ino=1156 res=1 errno=0 [ 760.646115][T11087] binder: 11083:11087 ioctl c0306201 20001480 returned -14 01:49:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x4}]}]}}]}, 0x3c}}, 0x0) [ 761.050816][ T25] audit: type=1800 audit(1655862571.103:23): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1173 res=0 errno=0 [ 761.057213][ T25] audit: type=1804 audit(1655862571.113:24): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1582009573/syzkaller.0FV3G5/432/file0" dev="sda1" ino=1173 res=1 errno=0 01:49:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:31 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89a1, &(0x7f0000000240)={'ip6gre0\x00', 0x0}) [ 761.291792][T11101] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 761.330624][T11100] binder: 11098:11100 ioctl c0306201 20001480 returned -14 01:49:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef84) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 01:49:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:31 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x8d) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r4, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@delchain={0x3c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x4}]}]}}]}, 0x3c}}, 0x0) 01:49:31 executing program 4: sched_getparam(0x0, &(0x7f00000002c0)) 01:49:31 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:32 executing program 0: setresuid(0xee00, 0xee01, 0xffffffffffffffff) r0 = geteuid() setresuid(r0, 0xee00, 0xffffffffffffffff) [ 762.049613][T11112] binder: 11107:11112 ioctl c0306201 20001480 returned -14 01:49:32 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @empty}}) 01:49:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:32 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(r0, 0x29, 0x49, 0x0, &(0x7f0000000040)) [ 762.234978][ T25] audit: type=1800 audit(1655862572.293:25): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1156 res=0 errno=0 [ 762.265027][ T25] audit: type=1804 audit(1655862572.303:26): pid=11117 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3152464667/syzkaller.tEdfXk/559/file0" dev="sda1" ino=1156 res=1 errno=0 01:49:32 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x8000, 0x7, 0x300}, 0x10) 01:49:32 executing program 4: r0 = syz_io_uring_setup(0x505c, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0xffffdf006000, 0x0, 0x2013, r0, 0x10000000) [ 762.614453][T11128] binder: 11124:11128 ioctl c0306201 20001480 returned -14 01:49:33 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef84) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) 01:49:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001280)={0x18, r1, 0x201, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) 01:49:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:33 executing program 0: r0 = syz_io_uring_setup(0x505c, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x4000)=nil, 0x1ffff000, 0x0, 0x2013, r0, 0x10000000) 01:49:33 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x15, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x80) 01:49:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) [ 763.354568][T11143] binder: 11136:11143 ioctl c0306201 20001480 returned -14 01:49:33 executing program 3: r0 = syz_io_uring_setup(0x4722, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x6, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1) 01:49:33 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x9, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000000280)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:49:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:33 executing program 0: socketpair(0x25, 0x3, 0x0, &(0x7f0000000180)) [ 763.449852][ T25] audit: type=1800 audit(1655862573.503:27): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1156 res=0 errno=0 [ 763.483443][ T25] audit: type=1804 audit(1655862573.513:28): pid=11146 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3152464667/syzkaller.tEdfXk/560/file0" dev="sda1" ino=1156 res=1 errno=0 [ 763.873453][T11153] binder: 11152:11153 ioctl c0306201 20001480 returned -14 01:49:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:34 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0xef84) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10) 01:49:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:34 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:34 executing program 3: r0 = msgget(0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x0) 01:49:34 executing program 4: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, r0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_EEE_HEADER={0x4}]}, 0x18}}, 0x0) 01:49:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:34 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f00000004c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}}, {{&(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=[@dstopts={{0x18}}], 0x18}}], 0x2, 0x0) [ 764.580541][T11170] binder: 11165:11170 ioctl c0306201 20001480 returned -14 01:49:34 executing program 3: r0 = syz_io_uring_setup(0x4722, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1) 01:49:34 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:34 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 764.768835][ T25] audit: type=1800 audit(1655862574.823:29): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1163 res=0 errno=0 [ 764.805595][ T25] audit: type=1804 audit(1655862574.863:30): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3152464667/syzkaller.tEdfXk/561/file0" dev="sda1" ino=1163 res=1 errno=0 01:49:35 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 765.225649][T11184] binder: 11183:11184 ioctl c0306201 20001480 returned -14 01:49:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:35 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:35 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10) 01:49:35 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:35 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:35 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 765.810327][T11195] binder: BINDER_SET_CONTEXT_MGR already set [ 765.810371][T11195] binder: 11188:11195 ioctl 4018620d 20000000 returned -16 [ 765.811589][T11195] binder: 11188:11195 ioctl c0306201 20001480 returned -14 01:49:35 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:36 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:36 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:36 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 766.075662][ T25] audit: type=1800 audit(1655862576.133:31): pid=11198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1163 res=0 errno=0 [ 766.082721][ T25] audit: type=1804 audit(1655862576.133:32): pid=11198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3152464667/syzkaller.tEdfXk/562/file0" dev="sda1" ino=1163 res=1 errno=0 01:49:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) [ 766.371298][T11202] binder: BINDER_SET_CONTEXT_MGR already set [ 766.371344][T11202] binder: 11201:11202 ioctl 4018620d 20000000 returned -16 [ 766.394026][T11202] binder: 11201:11202 ioctl c0306201 20001480 returned -14 01:49:36 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:36 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 766.943673][T11213] binder: BINDER_SET_CONTEXT_MGR already set [ 766.943719][T11213] binder: 11211:11213 ioctl 4018620d 20000000 returned -16 [ 766.948266][T11213] binder: 11211:11213 ioctl c0306201 20001480 returned -14 01:49:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10) 01:49:37 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:37 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) 01:49:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f000000", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:37 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:37 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) [ 767.370166][T11220] binder: 11217:11220 ioctl c0306201 20001480 returned -14 [ 767.384382][T11221] __nla_validate_parse: 1 callbacks suppressed [ 767.384448][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:37 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:37 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:37 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f000000", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:37 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 767.578246][ T25] audit: type=1800 audit(1655862577.633:33): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1158 res=0 errno=0 [ 767.580452][ T25] audit: type=1804 audit(1655862577.633:34): pid=11226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3152464667/syzkaller.tEdfXk/563/file0" dev="sda1" ino=1158 res=1 errno=0 01:49:37 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 767.927446][T11230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 767.930889][T11232] binder: 11228:11232 ioctl c0306201 20001480 returned -14 01:49:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f000000", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) [ 768.347234][T11238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10) 01:49:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) dup2(0xffffffffffffffff, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(0xffffffffffffffff, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:38 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:38 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:38 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f0000000800", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:38 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) [ 768.707432][T11247] binder: 11239:11247 ioctl c0306201 20001480 returned -14 01:49:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f0000000800", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:38 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 01:49:38 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:38 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 769.002125][ T25] audit: type=1800 audit(1655862579.053:35): pid=11250 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1159 res=0 errno=0 01:49:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f0000000800", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) [ 769.242132][T11258] binder: 11255:11258 ioctl c0306201 20001480 returned -14 01:49:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040)={r1}, 0x10) 01:49:39 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:39 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:39 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:39 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:39 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f000000080003", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) [ 769.873269][T11272] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 769.879484][T11267] binder: 11263:11267 ioctl c0306201 20001480 returned -14 01:49:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f000000080003", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:40 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 01:49:40 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:40 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 01:49:40 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 770.348558][T11279] binder: 11276:11279 ioctl c0306201 20001480 returned -14 [ 770.372546][T11280] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f000000080003", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) [ 770.746803][T11286] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. 01:49:40 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040), 0x10) 01:49:40 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 01:49:40 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:40 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 01:49:40 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:40 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:41 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') 01:49:41 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') 01:49:41 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:41 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040), 0x10) 01:49:41 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:41 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:41 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, r0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040), 0x10) 01:49:42 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:42 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 01:49:42 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 01:49:42 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:42 executing program 2: clock_gettime(0x0, &(0x7f0000000240)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={r0}, 0x10) 01:49:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:42 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 772.533031][T11331] binder: 11328:11331 ioctl c0306201 20001480 returned -14 01:49:42 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:42 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:42 executing program 2: clock_gettime(0x0, &(0x7f0000000240)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={r0}, 0x10) 01:49:42 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r1, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:43 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:43 executing program 2: clock_gettime(0x0, &(0x7f0000000240)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={r0}, 0x10) 01:49:43 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) [ 773.104695][T11344] binder: 11341:11344 ioctl c0306201 20001480 returned -14 01:49:43 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:43 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040), 0x10) 01:49:43 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:43 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 773.601630][T11355] binder: 11353:11355 ioctl c0306201 20001480 returned -14 01:49:43 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:43 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040), 0x10) 01:49:44 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:44 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 774.094549][T11369] binder: 11366:11369 ioctl c0306201 20001480 returned -14 01:49:44 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:44 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:44 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040), 0x10) 01:49:44 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) [ 774.530819][T11381] binder: 11376:11381 ioctl c0306201 20001480 returned -14 01:49:44 executing program 5: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r1, 0xffffffffffffffff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup2(r1, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:44 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={r0}, 0x10) 01:49:44 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:44 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:45 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) [ 774.990420][T11389] binder: 11387:11389 ioctl c0306201 20001480 returned -14 01:49:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={r0}, 0x10) 01:49:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:45 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:45 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:45 executing program 4: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:45 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x49, &(0x7f0000000040)={r0}, 0x10) [ 775.591448][T11403] binder: 11400:11403 ioctl c0306201 20001480 returned -14 01:49:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:45 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:46 executing program 3: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:46 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:46 executing program 4: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) [ 776.100482][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 776.100672][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 01:49:46 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) [ 776.194367][T11416] binder: 11414:11416 ioctl c0306201 20001480 returned -14 01:49:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={r1}, 0x10) 01:49:46 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:46 executing program 3: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:46 executing program 4: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) [ 776.807888][T11430] binder: 11423:11430 ioctl c0306201 20001480 returned -14 01:49:46 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={r1}, 0x10) 01:49:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:47 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:47 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:47 executing program 3: r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:47 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:47 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0}) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000040)={r1}, 0x10) [ 777.404236][T11440] binder: 11437:11440 ioctl c0306201 20001480 returned -14 01:49:47 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:47 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:47 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:47 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:48 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(r0, 0x1, 0x49, 0x0, 0x0) [ 778.005874][T11453] binder: 11451:11453 ioctl c0306201 20001480 returned -14 01:49:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:48 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:48 executing program 4: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(r0, 0x1, 0x49, 0x0, 0x0) 01:49:48 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 778.580165][T11467] binder: 11464:11467 ioctl c0306201 20001480 returned -14 01:49:48 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:48 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:48 executing program 3: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:48 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(r0, 0x1, 0x49, 0x0, 0x0) 01:49:49 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r2, @ANYBLOB="40007a800c0003008ba462c87df8a72a1400010004006da7fc040000463168fb3cb36c131c0003"], 0x5c}}, 0x0) 01:49:49 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:49 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:49 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:49 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040), 0x10) 01:49:49 executing program 1: syz_io_uring_setup(0x66, &(0x7f0000000040), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f00000000c0), &(0x7f0000000180)) syz_io_uring_setup(0x6ada, &(0x7f0000000200), &(0x7f0000e24000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380), &(0x7f00000003c0)) 01:49:49 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:49 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:49 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:49 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040), 0x10) 01:49:50 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:50 executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:49:50 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:50 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$sock_timeval(r0, 0x1, 0x49, &(0x7f0000000040), 0x10) 01:49:50 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:50 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:50 executing program 1: syz_io_uring_setup(0x4722, &(0x7f0000000000), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000080), 0x0) syz_io_uring_setup(0x2fe, &(0x7f00000004c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 01:49:50 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 780.696692][T11517] binder: 11514:11517 ioctl c0306201 20001480 returned -14 01:49:50 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) sendmmsg$alg(r0, &(0x7f0000003a40)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="929de556ee7aafb4f51dcd752c2bc922c3efdd966b95c42243c671ea5b6bf4d8c68beffa0fbe393c50ff03f9a922427372128da332e9d909bfb89a7694f30ff1dd019fe96811f6b0acb028bae73a26da44d44571c7e6f8e475deb9b315cc5104131eda3eaddc1360525a0361a52d7eff0209ee4f86c11cf9c8197c759d62eef7d3490abd131d217631b734df408d3df3dbb11b70c9e421af02e8", 0x9a}, {&(0x7f0000000380)="3627b48bfc9e1948ce10477a2c7e260658cc6442ced344c7bb525d94688755a6203676554e0a73dbe6da526c1dcd1a8b6005649efff15f3ef6c1f5d0d4c6465e4bf8c3dc8c", 0x45}, {&(0x7f0000000200)="8a3edee5c7f069d27ac332193291a58dde5dfd5b9b27", 0x16}, {&(0x7f0000000280)="6548578f18892b8e56a9430147ba70bf2e9058eacc5ed04d4a480f243dfb5700199dc836dde2712ae13837cd0cc56024b4", 0x31}, {&(0x7f0000000400)="e5388ec8b2ccbec83ea4c130963832772d80dc0abffd5041dbc135822a88b126aa50300b7fa9ae19e0bf839f7baa0af28e2136daf3d977e2293504f839663e0b66de3d17c26e2e2e90188a6666198cdd275a8f33438be2bc5ade5111c76ce4ed020530aa8b", 0x65}, {&(0x7f0000000480)="1a9dfc00b1cad619f837699e8acd43e2e607414c1080e4e627594a74e4b475c0474e54a27236ac6e1fe8b64cb8696a3410e3e747bf546ce27778382c170bd75a743c01613758952c88af3552b533eb6ec96fc2fe74e9c42b36d639fabafb536561930cc691bc50cf293859c72af86522986216d2eb22781621e645e1d32c76b7e958ef28e639701d8bdc33ebf901f846ceea61c3b1bac49be035acc0a49432c15c3114599cafc4333062b121", 0xac}], 0x6, &(0x7f00000008c0)=[@assoc={0xb}, @iv={0xd0, 0x117, 0x2, 0xba, "5f5c744cb8383e9d39f06c58211cbc26967c98cbdfc074c67c8e0ceb4cc13e9ae889f9b6fafd369fe8cd85a0f8d000f12d05769d7653126d32283a3acddad82c1a805a44693d02447c33efd16103a46e83d66a16265a3737516602d722daf59e1b8bc01e628300abfc96fbd49251239fbe24d5365dd4360e7921ec7cd3a174409bbea6a9d2468082e7aaad45d53f929e77a08a955aa349c30b39b4c93f55130ab19d52945701b81bf2400fa5e9b3ffe662447fa54a413428d18b"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @op={0x18}], 0x1130}, {0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000005c0)="d2315399096a86e9a1e69adb8d7e20fad9a00bb42864f4f6cbf0a5c29abbfaa68aa1c50f294f2011e3ea0dffee2e084e3c7618af569984dd2b3f2033f8da983327d09de02124adca0f5dda6c6f3b2c1eaec8639b8bd2cec7a2c6d09dbfbee6175d5ddc8ffa57da1cf13138f13d916ad4e88ef0503bfed9caa1e542bb83b89690b5cb352cf7015238d01cfd59ea2d88d56e568049be7e1cca07a0564dc1ff9c36664612bbe0155c18c12326fb1bf3491cf7c37133283cc71cab3e13f2d48ac3b1813c4302a04f684e942c0bcf486a0c201d5c0a80cd36be4b8dd88e9a46415b7d44e550dec5efb17e6b004f112b503d4570360544", 0xf4}, {&(0x7f0000001a00)="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", 0x1000}, {&(0x7f00000006c0)="d0064a5991dd890ac942a3e87eabf06ab9c96ffa27b21b9c7c3d9acbc652584a15695f9eb409c849b83c815f84c6a81f541b1cf67c67c4dabebaaec0201597797f6295641294582730fb90aa3723d375317aa79236f5b10b8909ffe47091719513f4957bc1fc374aef95364612a7df6eb5f784715ed0801fb167bd7a34e3122b68d99f45d6439f7497df71dcb5dd8c3ecc630ad26b99db2c7df803612c6fa3aea3ca61ebdeef4b0f6e1d641c2be10ba8105c88a65313c02921d7f3451944a920e0df9b73db5eab77c0d583363ffb2fbe96ca65fad4059d993325cb0b26ffd596", 0xe0}, {&(0x7f00000007c0)="628e94cf5de482f434a0d5a8bdd86ab24270d51ce0fd55836c3c5c04cc909e9d542c8d3193b1ab5bfa9091569e1d1f8ced8d0ab40f9e889b59ce4df747cc3644acbb432454111799d1a8fecd9425867e6438abdc2435ca737d031a16a6bf4a85247dcb78dbe9d681b84b6571d721b3", 0x6f}, {&(0x7f0000002a00)="ce760c025c6c5b2da0647d0a983988cd59968b012c8d92279afc397574ac14743fdb3e425b42902e51082ef617d7001d484ff5afc4200afa7301439f672fb5df29fc3688db2a054f689841797e6c71c0bd9dc7bf638e8797af9e9d7b2c3d698f793ed658db8d5e1e55e7c0b2cdfc5f130e70d9a44dcc9dc510bff34a28bd587fb978fdd1edf49e47b6a1405c663871ec712ff6e300ecbaeced8fb0f7f1e9073510b46d784f4d0b712d777f9de0213c7bd8c95608a4afd3b5282df355e0a2ae25a65fcfdd0e3c83c98ffff7c36edd3d394518846ea6e869041f65ea6998ba33023932", 0xe2}, {&(0x7f0000000840)="a30f7244f03c506627", 0x9}, {&(0x7f0000002b00)="6a85060352557d4a25d58e97d173934e9ae6ace9d78261e34541de6b0d60d46bd8404fa644eb061e0b1e477992603ae8f512c89bf853e57fe512a3d412611e3d89947ac4bbc756d6705c49130e5467e2220db05d85401f91ec80a535cb414937512c3119", 0x64}, {&(0x7f0000002b80)="23ddc9bc2011a36772c927d0bf47ff190844b29110a8fe66c7c32e6b8e22a005fdc39db8363f5a3093", 0x29}], 0x8, &(0x7f0000002c40)=[@iv={0x18, 0x117, 0x2, 0x1, "81"}, @assoc={0x18}, @op={0x18}, @iv={0xe8, 0x117, 0x2, 0xd3, "f56ea36738a40ac89eaceee661192a8f9c337a58ddc7f7811f228bdc6b78ec7dd688db2586754f3c01eb2dfbeac9175f480ed3f1547e0dd01d20a460457c7ff94e96c22968b143d6de4ca939b20e69d9b56fb8d9fb48c7d1971727b03d43e41a02c9a603a89879bd4468da896f8fb18216b5742cecfd01c4e24b9207e46813b78162606a599a6a897a76c8ebff1338fe65d7558b254da35f3d072a626ca051b2140a9922394a0cfb62be5fee41bfe16c7d2fa7ce388b1fe0bd0ce43215d0a591690d34742cad0fc04453889d74b4028ea0e762"}, @assoc={0x18}, @op={0x18}, @iv={0x30, 0x117, 0x2, 0x15, "42b9263e251d3e4205068aad1f50f20e2bbab48f37"}, @op={0x18}, @iv={0x80, 0x117, 0x2, 0x6c, "c274821bdc8ffb9f4cbd9854b6ec0748191114156eec0fd9f962a88f5d107d6ef9c8c92d185fb7c26c40355777fe193b89cdd43d8855d8849984c015a638fa98b0dad75293369049d33785cdef0e99fe8c322039aafcfa9a552372ccc14c96f49efcf989ac60a1e131597c3f"}, @op={0x18}], 0x240, 0x48015}, {0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002e80)="11a36194bf5ace8aaef713ae45d13da892df830ee91db15504329ee9cf7010be2887d604f911cd71dfe542ee6470c0c6d9af768168c1b143bf0906420bc77842cbdabac669f6bbb477b3ebd2477941d50019e80194facc897ad20eace860f456e3c7f210c5664cb137ef7e28e58e389f435ac7d67fca45757527626a75cdc2e39e3fc68d393b6ca28b536103c1115b3ce9840ec486cf7368713ceeded28ffdb2406b2bd05f1d577c87010c7bbe2808b529330464c30621ba41879171f5bf9433b42db2e1560800fb1a8816ff1e7da424e5f26596a932d7427a60", 0xda}, {&(0x7f0000002f80)="12359ea51dc11fbba8aeaf1f2e982c04053d69d8b2789fcaecd2eda82c47e475c42f3d8f60722e4148f753758400ee495deb95e8e1c1823920a04b09a745a9706e39efeb68bed0b723cfbfbedde80da1a96b5986f91eed2caa4e1155f9e70b956819583f96f4de5cf23141f5421fbcb637b376438fbc055970da23c82e354e33b1d2dc4089945fca7ff9e0c17937e501738642fa4305fa3a28d3ec03ea0389c107c783ab3ebc86356e0c0457e2a4921243064e037ffcd2726b513d481cbc6f38353e084caac9614c2443276bffddd640c838dcaf3e68f524bd70c6169d", 0xdd}, {&(0x7f0000003080)="fc4e25f36b390aee712572ac4fb34c2584f6f0d634b690c8b874c2709da4f28f191cf1e17d471b82b07bf0548f76977bedeb2e004eac1f2f3816a778e85bb08bbbc8aaa90e09f09ee4275bbb7d6ad0394d49c9c14f7519673ce0a82d4dd69425daa6bfcc6dafb190d21e2c7d2ae1f0a66a098e125e357f1c4e186ebbb767956d438a9db203382e54a166fe82b19386b45da73dc983aa41ebe65056f9d5b88b53cd", 0xa1}, {&(0x7f0000003140)="a5237c6028fb881bdbdc7b1f715964bcc3977d7d7bd4fd135f62", 0x1a}, {&(0x7f0000003180)="32aecad047ff0b089ab2d145d868f982cda1", 0x12}, {&(0x7f00000031c0)="2548e7b1cc0e5d24b0598a86d128bd4566c82e20c8f133ef03e87a0b3e2134ab5d5c19adbef979acc537351e1ca4a24e2e5c706ea7b695c52954da9b917fbb41b9d533e69b990fb92819e86895309dc2efcb345a0016d1a16504ea560675f041cdeaf519ec2d436e482678a02b992b1e0c3d87b49da9846319d99471f1deae72ccf7c09e68e34dee5f8fcd80fef67431cc216838fb30434cf512c9ff8bb1310459e36714998da6b8bf02db09afacd47df127cbfd379d54e36b9aabac634f2a", 0xbf}], 0x6, 0x0, 0x0, 0x240000c4}, {0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000003440)="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", 0xfa}, {&(0x7f0000003300)="94ad5c87125519286a8b6612b18ee9dc8ffe2f68568db72fbb2df12e11512cb8f3e773a303fab09db9bbf64a4290da473a5f1dbce01712140f589da13f3f05cc7850a591e268ec0268d0227cc7ba6ea8fad11a6e8561", 0x56}, {&(0x7f0000003540)="2c6dc4d3a1a2930e20130e603311f2b1540dcf9a38b5c06b6c42e9a6a8a792f0e12fb66a21180affbc90699062895ed8af479ba2eefb56f2f15e28599238637be462d60dd62854a68115d65c9caea79fec16ff99d051e42f7bf9f1b8307db33755046000179fdfb1b9391f9ed08f9423b9cc5971bfb3fc4c1aeef4f59ccf2ede964179393b3bc6643530d14bc7387d244b86ab974c64ad4c19a3341c643134dedb1cfa8312de0498543304e425130185ab65987af4299cd793a3d0b9de77826066bcaa5fa6a1b3db1bb0616daf711f4354", 0xd1}, {&(0x7f0000003640)="d05407c1a3934820f4227b9bf0584a2eae2b85f49eaf4860e43239a41e846737488ae967afede143cff2d03b2eab1c40c9a3ad0bf578f696e2fd243bd65ccf49218bfbf454ed8da2afd45e2d442f083b9ee9772b24152ca71a5201ace08ee807d9f12be50df4b869ab7a02877fbd75b57dd60857bc5344ebf969dcb564db89592f8be4abf14acb6ad27904a10f24485e47090f5c47dba38e4287ac10a8e7bd7e8849bb3df989766115f771cd60370afb3d2bd332b72e1b642af8ec9f81b414ba13d67eb907e56f23d9b9669aa93890c5455dc3029c83a5565e2ede82a9160a45892805bdfcb14b", 0xe7}], 0x4, &(0x7f0000003740)=[@iv={0xe8, 0x117, 0x2, 0xcf, "63fc328ed9af5a2ec650d4b2630dad09fe91e13bb5d06ebc25a9aef4bad078ac7dbed51b7d4211caa0ec3ccd1e60ee1110514f9ed58eda4a100863a1cb75bbefaa1902069f1f96c33700375df85c5ba2415dab29a632ac3a5ece844e11b9512c046e2175d97fe368f7f087534d8d1a238f729916e624d748e1f643ba2f615a4a82cd280ca5697b8a9ed72056ade2d3aafc852f2425d1da722bd8a50ec03b082328af2bfbc39a04be00aafe7bc42a58aedebe811408747c9f30814b36d5788e405f52de96924878ce6219d8ea74d020"}, @assoc={0x18}, @iv={0xf8, 0x117, 0x2, 0xe0, "88ae9d8d74d00258c1ebe3677d00cedd410cd1815953b1a9d261162a8c3ffb8e3cd5d3126533860a1722e469dabff71c4f1c4dda87e90029d4bbe58b25c94923bceca4e042a4ef8338cc1d011a059e8e7070e671de1cfe58140b39c8c95cb5ffbc516d02fc3c0b0c93642da26de20e4ff42e76a350202088250e2ca376b23a94f0dfaedf59c2174da0044cdd814e5c9bcb7ef56d550d0cc4ec3f757d9a2277b018e5a9cfe97e736dbd21c49bdac2869041da76f3d380dfb2ba16b3f50c19696ce1a71326e9107ec63c4ed2d131c75269c1baa332fb1265f272d0b7f7b8eef14b"}, @iv={0xe8, 0x117, 0x2, 0xd3, "daf16e88b71a5c6a8c339991cbd79c9d3881581c28662bd0c177556c86ccc552edfc50de8ab156d0feebda18d6cb81177943d8ac8bb1f176c7126f4b99481485d6236877f907196a2587d31a9e1c7f5c7f230e1b44889f6ba0a6d3496d7e6414bea8e8200a2412e7b9beddf76487e7e59080c359043d4ca39cbb21ea0eb1492a4d0b88548f1e5a68fccb66df5a561b7f4b84a65216521d8c33606a935a0d3a91a7d820841dbab4e8dcfea5798a68a342bc8d62c1a92fdcb91c4b3e730649bf38c5e6028bcb9907bdb78f65c364ece6030abefb"}], 0x2e0, 0x44842}], 0x4, 0x0) 01:49:50 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:51 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:51 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1, &(0x7f00000001c0)=@raw=[@kfunc], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 01:49:51 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:51 executing program 2: syz_io_uring_setup(0x505c, &(0x7f00000001c0), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0) syz_io_uring_setup(0x709a, &(0x7f0000000480)={0x0, 0xc079}, &(0x7f00003fd000/0xc00000)=nil, &(0x7f0000784000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000500)) [ 781.304252][T11531] binder: 11530:11531 ioctl c0306201 20001480 returned -14 01:49:51 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:51 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:51 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f0000000200), 0x4) [ 781.716039][T11545] binder: 11544:11545 ioctl c0306201 20001480 returned -14 01:49:51 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:51 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000000)=0x1fa6, 0x4) 01:49:51 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:51 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 782.147787][T11557] binder: 11552:11557 ioctl c0306201 0 returned -14 [ 782.178450][T11557] binder: 11552:11557 ioctl c0306201 20001480 returned -14 01:49:52 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_mount_image$fuse(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002ec0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) 01:49:52 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000200)=0x4, 0x4) 01:49:52 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:52 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:52 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:52 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:52 executing program 2: r0 = io_uring_setup(0x77e2, &(0x7f0000000200)={0x0, 0x7866}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 01:49:52 executing program 1: syz_io_uring_setup(0x7e7c, &(0x7f0000000280), &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0, 0x0) syz_io_uring_setup(0xc56, &(0x7f0000000380), &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000400), &(0x7f0000000440)) 01:49:52 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 782.790687][T11573] binder: 11569:11573 ioctl c0306201 0 returned -14 [ 782.819266][T11573] binder: BINDER_SET_CONTEXT_MGR already set [ 782.819306][T11573] binder: 11569:11573 ioctl 4018620d 20000000 returned -16 01:49:52 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:52 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) [ 782.839110][T11573] binder: 11569:11573 ioctl c0306201 20001480 returned -14 01:49:53 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:53 executing program 2: sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x2, &(0x7f0000000040)) [ 783.256693][T11585] binder: 11580:11585 ioctl c0306201 0 returned -14 01:49:53 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:53 executing program 1: syz_io_uring_setup(0x2711, &(0x7f00000001c0), &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000240), 0x0) pkey_mprotect(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x4, 0xffffffffffffffff) [ 783.294513][T11585] binder: 11580:11585 ioctl c0306201 20001480 returned -14 01:49:53 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:53 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) 01:49:53 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:53 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@abs, 0x6e) 01:49:53 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 783.762707][T11598] binder: 11594:11598 ioctl c0306201 20000080 returned -14 [ 783.797374][T11598] binder: 11594:11598 ioctl c0306201 20001480 returned -14 01:49:53 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 01:49:53 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)) 01:49:53 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:54 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080), 0x4) 01:49:54 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 784.245133][T11610] binder: 11605:11610 ioctl c0306201 20000080 returned -14 [ 784.297497][T11610] binder: 11605:11610 ioctl c0306201 20001480 returned -14 01:49:54 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 01:49:54 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:54 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:54 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x8980, 0x0) 01:49:54 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:54 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000200)=0x4, 0x4) [ 784.816063][T11620] binder: 11619:11620 ioctl c0306201 20000080 returned -14 [ 784.844829][T11620] binder: 11619:11620 ioctl c0306201 20001480 returned -14 01:49:55 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5450, 0x0) 01:49:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:55 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) 01:49:55 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:55 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 01:49:55 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0), 0x4) 01:49:55 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x8906, 0x0) [ 785.275156][T11633] binder: 11631:11633 unknown command 0 [ 785.275236][T11633] binder: 11631:11633 ioctl c0306201 20000080 returned -22 [ 785.307150][T11633] binder: 11631:11633 ioctl c0306201 20001480 returned -14 01:49:55 executing program 4: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x20) 01:49:55 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:55 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:55 executing program 1: syz_io_uring_setup(0x200067ec, &(0x7f00000003c0), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) 01:49:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$fuse(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}) [ 785.768879][T11647] binder: 11645:11647 unknown command 0 [ 785.768949][T11647] binder: 11645:11647 ioctl c0306201 20000080 returned -22 01:49:55 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) [ 785.826412][T11647] binder: 11645:11647 ioctl c0306201 20001480 returned -14 01:49:56 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:56 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) 01:49:56 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000), 0x4) [ 786.151882][T11654] fuse: Bad value for 'group_id' 01:49:56 executing program 2: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 01:49:56 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 786.295362][T11660] binder: 11658:11660 unknown command 0 [ 786.295434][T11660] binder: 11658:11660 ioctl c0306201 20000080 returned -22 01:49:56 executing program 3: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 01:49:56 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x4020940d, 0x0) [ 786.347511][T11660] binder: 11658:11660 ioctl c0306201 20001480 returned -14 01:49:56 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:56 executing program 1: socket$netlink(0x10, 0x3, 0xf878eb6fd2347bad) 01:49:56 executing program 2: io_uring_setup(0x5d9c, &(0x7f0000000080)={0x0, 0xf491, 0x1f, 0x0, 0xfeffffff}) 01:49:56 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 786.807122][T11673] binder: 11670:11673 unknown command 0 [ 786.807198][T11673] binder: 11670:11673 ioctl c0306201 20000080 returned -22 01:49:56 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5451, 0x0) 01:49:56 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000140), 0xc) [ 786.835229][T11673] binder: 11670:11673 ioctl c0306201 20001480 returned -14 01:49:57 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 01:49:57 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:57 executing program 2: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x10000000}) 01:49:57 executing program 3: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x7fffdf003000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 787.294316][T11688] binder: 11683:11688 unknown command 0 [ 787.294484][T11688] binder: 11683:11688 ioctl c0306201 20000080 returned -22 [ 787.314029][T11688] binder: 11683:11688 ioctl c0306201 20001480 returned -14 01:49:57 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x12100, 0x0, 0xfffffec8) 01:49:57 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000240)='l', 0x1}], 0x1}}], 0x1, 0x0) 01:49:57 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:57 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1b, &(0x7f00000000c0)=0x1000, 0x4) 01:49:57 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x8981, 0x0) [ 787.698427][T11694] binder: 11692:11694 unknown command 0 [ 787.698501][T11694] binder: 11692:11694 ioctl c0306201 20000080 returned -22 [ 787.721143][T11694] binder: 11692:11694 ioctl c0306201 20001480 returned -14 01:49:57 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:57 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x40049409, &(0x7f0000000040)) 01:49:57 executing program 4: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x80108906, 0x0) 01:49:58 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 01:49:58 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:58 executing program 3: r0 = timerfd_create(0x7, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, &(0x7f0000000240)) [ 788.164338][T11707] binder: 11706:11707 unknown command 25348 [ 788.164413][T11707] binder: 11706:11707 ioctl c0306201 20000080 returned -22 [ 788.180286][T11707] binder: 11706:11707 ioctl c0306201 20001480 returned -14 01:49:58 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:58 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000040)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001300)=[{&(0x7f00000001c0)="ec598a3350ce1f982b92ed0b01136325651e4b289ef38bb7227d9bd653c45e26ffb3dfd986bba37053316cf4d74d57a0761285ae4674b7908ffc1e99a30c8da69157a66c65dda3b85004c0ab8a", 0x4d}], 0x1, &(0x7f0000001340)=[{0x10}, {0x10}], 0x20}, 0x0) 01:49:58 executing program 1: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, 0x0) 01:49:58 executing program 2: pkey_mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000140)=""/179) 01:49:58 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='.\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}}) [ 788.539369][T11719] binder: 11718:11719 unknown command 25348 [ 788.539441][T11719] binder: 11718:11719 ioctl c0306201 20000080 returned -22 01:49:58 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 788.584989][T11719] binder: 11718:11719 ioctl c0306201 20001480 returned -14 01:49:58 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:58 executing program 1: r0 = socket(0x2, 0xa, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, 0x0, 0x0) 01:49:58 executing program 4: socketpair(0x1d, 0xa, 0x6, &(0x7f0000000180)) 01:49:58 executing program 3: syz_io_uring_setup(0x20b1, &(0x7f0000000480)={0x0, 0x1120, 0x8}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x5000)=nil, &(0x7f0000000500), &(0x7f0000000540)) 01:49:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000200)=0x4, 0x4) [ 789.000131][T11731] binder: 11729:11731 unknown command 25348 [ 789.000203][T11731] binder: 11729:11731 ioctl c0306201 20000080 returned -22 [ 789.019700][T11731] binder: 11729:11731 ioctl c0306201 20001480 returned -14 01:49:59 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:59 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:59 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 01:49:59 executing program 3: r0 = syz_io_uring_setup(0x2be1, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x1065, &(0x7f0000000100)={0x0, 0x0, 0x33, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) 01:49:59 executing program 1: io_uring_setup(0x5d9c, &(0x7f0000000080)={0x0, 0xf491, 0x1f, 0x24}) 01:49:59 executing program 2: r0 = mq_open(&(0x7f0000000140)='\\-&$)\xde{%\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000200)=""/174, 0xae, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}) [ 789.400243][T11741] binder: 11740:11741 unknown command 287492 [ 789.400323][T11741] binder: 11740:11741 ioctl c0306201 20000080 returned -22 [ 789.437486][T11741] binder: 11740:11741 ioctl c0306201 20001480 returned -14 01:49:59 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:49:59 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:49:59 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$netlink(r0, &(0x7f00000005c0)={&(0x7f0000000040), 0xc, 0x0}, 0x0) 01:49:59 executing program 4: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0xbc07, 0x0, 0x0, "fbb1e045e275a22d916fb6c74c5858dc8db545"}) 01:49:59 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000200), 0x4) 01:49:59 executing program 1: mmap$IORING_OFF_SQ_RING(&(0x7f0000bff000/0x400000)=nil, 0x400000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 789.877861][T11753] binder: 11752:11753 unknown command 287492 [ 789.877936][T11753] binder: 11752:11753 ioctl c0306201 20000080 returned -22 [ 789.944696][T11753] binder: 11752:11753 ioctl c0306201 20001480 returned -14 01:50:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="046304"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:00 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:00 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) 01:50:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) 01:50:00 executing program 1: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 01:50:00 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 790.371354][T11765] binder: 11764:11765 unknown command 287492 [ 790.371431][T11765] binder: 11764:11765 ioctl c0306201 20000080 returned -22 [ 790.406274][T11765] binder: 11764:11765 ioctl c0306201 20001480 returned -14 01:50:00 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:00 executing program 3: syz_clone(0xa80a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 01:50:00 executing program 1: syz_mount_image$squashfs(&(0x7f0000004f40), &(0x7f0000004f80)='./file0\x00', 0x0, 0x0, &(0x7f00000051c0), 0x15800, &(0x7f0000005240)) 01:50:00 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x8904, &(0x7f0000000040)) 01:50:00 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:00 executing program 4: syz_clone(0xa80a1000, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) [ 790.885617][T11777] binder: 11776:11777 ioctl c0306201 20001480 returned -14 01:50:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:01 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x108010, r0, 0x0) 01:50:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r1, 0x1}, 0x14}}, 0x0) 01:50:01 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)={0x10}, 0x10}], 0x1, &(0x7f0000001440)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, 0xee00}}}], 0x20}, 0x0) [ 791.310042][T11789] binder: 11788:11789 ioctl c0306201 20001480 returned -14 01:50:01 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:01 executing program 4: syz_clone(0xa80a1000, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) 01:50:01 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(0xffffffffffffffff, 0xffffffffffffffff) 01:50:01 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200)=0x4, 0x4) 01:50:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000200), 0x4) [ 791.828120][T11798] binder: 11797:11798 ioctl c0306201 20001480 returned -14 01:50:02 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:02 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:02 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r1 = getuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r1, @ANYBLOB=',group_id=', @ANYRESDEC=r2]) 01:50:02 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000200)=0x4, 0x4) 01:50:02 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000000200), 0x4) 01:50:02 executing program 1: openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)={0x2ea40}, 0x18) [ 792.429058][T11812] binder: BINDER_SET_CONTEXT_MGR already set [ 792.429101][T11812] binder: 11810:11812 ioctl 4018620d 20000000 returned -16 [ 792.430008][T11812] binder: 11810:11812 ioctl c0306201 20001480 returned -14 01:50:02 executing program 0: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:02 executing program 2: io_uring_setup(0xdd9c, &(0x7f0000000080)) [ 792.551010][ T25] audit: type=1800 audit(1655862602.603:36): pid=11819 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1181 res=0 errno=0 01:50:02 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:02 executing program 4: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x7ffffffff007, 0x0, 0x31, 0xffffffffffffffff, 0x0) 01:50:02 executing program 1: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0, 0x0) 01:50:02 executing program 3: mq_open(&(0x7f0000000000)='+\x00', 0x40, 0x0, &(0x7f0000000040)={0xfffffffffffffffb, 0x8000, 0x10001, 0x1}) [ 792.816178][T11823] binder: BINDER_SET_CONTEXT_MGR already set [ 792.816219][T11823] binder: 11821:11823 ioctl 4018620d 20000000 returned -16 [ 792.817084][T11823] binder: 11821:11823 ioctl c0306201 20001480 returned -14 01:50:02 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000040)=@ieee802154={0x24, @long}, 0x80, 0x0}, 0x0) 01:50:02 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:03 executing program 0: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(r0, 0x0, 0x0, 0x43, 0x0, 0x0) 01:50:03 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000200)=0x4, 0x4) 01:50:03 executing program 3: syz_mount_image$fuse(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="e7"]) [ 793.247763][T11836] binder: BINDER_SET_CONTEXT_MGR already set [ 793.247805][T11836] binder: 11834:11836 ioctl 4018620d 20000000 returned -16 [ 793.248629][T11836] binder: 11834:11836 ioctl c0306201 20001480 returned -14 01:50:03 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0xc0045878, 0x0) 01:50:03 executing program 0: mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:03 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:03 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xb, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x0, 0x0, 0x0, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x0) [ 793.604241][T11844] fuse: Unknown parameter 'ç' 01:50:03 executing program 4: r0 = mq_open(&(0x7f0000000140)='\\-&$)\xde{%\x00', 0x0, 0x0, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) [ 793.677927][T11848] binder: BINDER_SET_CONTEXT_MGR already set [ 793.677967][T11848] binder: 11846:11848 ioctl 4018620d 20000000 returned -16 [ 793.682853][T11848] binder: 11846:11848 ioctl c0306201 20001480 returned -14 01:50:03 executing program 3: syz_io_uring_setup(0x545b, &(0x7f0000004480)={0x0, 0x9461, 0x3d}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000004500), &(0x7f0000004540)) 01:50:03 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5460, 0x0) 01:50:03 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:04 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:04 executing program 1: syz_mount_image$fuse(&(0x7f0000002e40), &(0x7f0000002e80)='./file0\x00', 0x0, 0x0, 0x0, 0xc0ed0000, &(0x7f0000002ec0)) 01:50:04 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000']) [ 794.153857][T11857] binder: BINDER_SET_CONTEXT_MGR already set [ 794.153903][T11857] binder: 11854:11857 ioctl 4018620d 20000000 returned -16 [ 794.154652][T11857] binder: 11854:11857 ioctl c0306201 20001480 returned -14 01:50:04 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) sendmmsg(r0, &(0x7f00000097c0)=[{{&(0x7f0000000080)=@ethernet, 0x80, 0x0}}], 0x1, 0x0) 01:50:04 executing program 2: pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) 01:50:04 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 794.406191][T11864] fuse: Bad value for 'fd' 01:50:04 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:04 executing program 1: mq_open(&(0x7f0000000140)='\\-&$)\xde{%\x00', 0x0, 0x0, &(0x7f00000001c0)) 01:50:04 executing program 4: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc) 01:50:04 executing program 2: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x1fffff, 0x0, 0x31, 0xffffffffffffffff, 0x0) 01:50:04 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000002e80)='./file0\x00', 0x6c, 0x0, 0x0, 0x0, 0x0) [ 794.646115][T11872] binder: BINDER_SET_CONTEXT_MGR already set [ 794.646160][T11872] binder: 11870:11872 ioctl 4018620d 20000000 returned -16 [ 794.646945][T11872] binder: 11870:11872 ioctl c0306201 20001480 returned -14 01:50:04 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:04 executing program 0: syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:05 executing program 1: syz_io_uring_setup(0x5562, &(0x7f0000000000), &(0x7f0000000000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) 01:50:05 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000000)=0xff000000, 0x4) 01:50:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) 01:50:05 executing program 2: r0 = socket(0x2, 0xa, 0x0) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000900)={&(0x7f0000000700), 0xc, &(0x7f00000008c0)={0x0, 0x148}}, 0x0) [ 795.118020][T11884] binder: 11883:11884 ioctl c0306201 20001480 returned -14 01:50:05 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:05 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:05 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x2) 01:50:05 executing program 2: syz_mount_image$squashfs(0x0, 0x0, 0x0, 0x1, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="e04b182f25fc936b68586122e13020f3f84eeb65672be93253b9286d4045cb4e3de1b8ae5036ba9120ebf09b333c6772b9686daff627fcb5af5e096556c00b0e60", 0x41}], 0x0, 0x0) 01:50:05 executing program 4: r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000200)={{}, {0x0, 0x3938700}}, &(0x7f0000000240)) 01:50:05 executing program 3: r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000), 0x4) [ 795.559228][T11896] binder: 11895:11896 ioctl c0306201 20001480 returned -14 01:50:05 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:06 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) 01:50:06 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x13, &(0x7f0000000200)=0x4, 0x4) 01:50:06 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x202c0, 0x0) 01:50:06 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x48802, 0x0) write$eventfd(r0, 0x0, 0x0) [ 796.085076][T11908] binder: 11907:11908 ioctl c0306201 20001480 returned -14 01:50:06 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:06 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000002500), 0x0, 0x2) 01:50:06 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x400, 0x39) 01:50:06 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:06 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x18aa01, 0x0) write$P9_RVERSION(r0, 0x0, 0x0) 01:50:06 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x78480, 0x191) [ 796.530020][T11920] binder: 11919:11920 ioctl c0306201 20001480 returned -14 01:50:06 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:06 executing program 2: pipe(&(0x7f0000000040)={0xffffffffffffffff}) read$watch_queue(r0, 0x0, 0x0) 01:50:06 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x202003, 0x81) 01:50:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='status\x00') write$P9_RREADLINK(r0, 0x0, 0x0) 01:50:07 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x10800, 0xa2) 01:50:07 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 797.039841][T11932] binder: 11931:11932 ioctl c0306201 20001480 returned -14 01:50:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(0xffffffffffffffff, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:07 executing program 2: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pressure(r0, 0x0, 0xffffffffffffffa8) 01:50:07 executing program 1: mknod(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mknod(&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x0) 01:50:07 executing program 4: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x78480, 0xa1) 01:50:07 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) [ 797.509577][T11947] binder: 11945:11947 ioctl c0306201 20001480 returned -14 01:50:07 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:07 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:07 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x230482, 0xd3) 01:50:07 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$watch_queue(r0, 0x0, 0xfffffffffffffe61) 01:50:08 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0xa2000, 0x61) [ 797.936149][T11958] binder: 11957:11958 ioctl c0306201 20001480 returned -14 01:50:08 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:08 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff}) read$watch_queue(r0, &(0x7f0000000080)=""/208, 0xd0) 01:50:08 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff}) fcntl$lock(r0, 0x9, 0x0) 01:50:08 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_linger(r0, 0xffff, 0x80, &(0x7f0000000000), 0x8) 01:50:08 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 798.404690][T11971] binder: 11968:11971 ioctl c0306201 20001480 returned -14 01:50:08 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, 0xffffffffffffffff) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:08 executing program 3: chdir(&(0x7f0000000140)='\x00') 01:50:08 executing program 2: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x121100, 0x62) [ 798.910648][T11984] binder: 11981:11984 ioctl c0306201 20001480 returned -14 01:50:09 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:09 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$eventfd(r0, 0x0, 0x1b) 01:50:09 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x91) 01:50:09 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:09 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000000), 0x0) 01:50:09 executing program 4: select(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000140)={0x0, 0x46}) [ 799.426483][T11991] binder: 11990:11991 ioctl c0306201 20001480 returned -14 01:50:09 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:09 executing program 3: madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 01:50:09 executing program 4: semget(0x1, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0x6, &(0x7f0000000000)=""/190) 01:50:09 executing program 1: semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)) 01:50:09 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 799.910762][T12007] binder: 12006:12007 ioctl c0306201 20001480 returned -14 01:50:10 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:10 executing program 3: pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001940)=[{0x0}], 0x1}, 0x0) 01:50:10 executing program 2: chown(&(0x7f0000000200)='\x00', 0x0, 0x0) 01:50:10 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000580)="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", 0x171, 0x0, 0x0, 0x0) 01:50:10 executing program 4: getpgrp(0x0) getrusage(0x0, &(0x7f0000002a40)) 01:50:10 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 800.446257][T12020] binder: 12016:12020 ioctl c0306201 20001480 returned -14 01:50:10 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:10 executing program 2: socket(0x1, 0x0, 0x1) 01:50:10 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ftruncate(r0, 0x0) 01:50:10 executing program 4: getpgrp(0x0) getrusage(0x0, &(0x7f0000002a40)) 01:50:10 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fchown(r0, 0xffffffffffffffff, 0x0) 01:50:10 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:11 executing program 2: setrlimit(0x8, &(0x7f0000000080)) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 800.940134][T12032] binder: 12031:12032 ioctl 4018620d 0 returned -22 [ 800.941100][T12032] binder: 12031:12032 ioctl c0306201 20001480 returned -14 01:50:11 executing program 3: fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x6) 01:50:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:11 executing program 4: getpgrp(0x0) getrusage(0x0, &(0x7f0000002a40)) 01:50:11 executing program 1: utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x0) 01:50:11 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x3}, 0xc) 01:50:11 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 801.473712][T12046] binder: 12042:12046 ioctl 4018620d 0 returned -22 [ 801.474716][T12046] binder: 12042:12046 ioctl c0306201 20001480 returned -14 01:50:11 executing program 4: getpgrp(0x0) getrusage(0x0, &(0x7f0000002a40)) 01:50:11 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) read(r0, &(0x7f0000000000)=""/176, 0xb0) 01:50:11 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:11 executing program 1: r0 = socket$inet(0x2, 0x3, 0x0) getsockopt$inet_opts(r0, 0x0, 0x1, 0x0, 0x0) 01:50:12 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 801.993610][T12062] binder: 12058:12062 ioctl 4018620d 0 returned -22 [ 802.002060][T12062] binder: 12058:12062 ioctl c0306201 20001480 returned -14 01:50:12 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 01:50:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:12 executing program 2: pipe(&(0x7f0000000340)={0xffffffffffffffff}) fchdir(r0) 01:50:12 executing program 1: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCGWINSZ(r0, 0x40087468, &(0x7f00000000c0)) 01:50:12 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:12 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) dup2(r0, r1) r2 = socket$unix(0x1, 0x2, 0x0) poll(&(0x7f0000000040)=[{r1, 0x4}, {r2, 0x4}], 0x2, 0x0) 01:50:12 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:12 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendto$unix(r0, &(0x7f0000000580)="97a000f4fee798030a15549ea2044f30af2cc808b4af5a1a749a48f30dd47315f26a7cb1502232b09ba82895d5b39342a87c2b5cb2cd41f0acbcd797f77e01650bf827cea331d01edae0195788633a0219034d8dbc9b863bc0782f21c6ee5d8030881dc3451e95df42c47865c9d494245d965cdd544c6106ad731ea8b497a519519408e4a3ea1a093bf63ae1f1033af5db32775dab36dcab14f831f42c546847845dc8c0e378f81067c2de037a2fee6d33ef021965c31d7113db0546c625811c2b18df68a135d42efb9a07862174a5a050338dc603c7915df61a3fd54c1bc5a2a4834362041050686293265ab90bb1f25fb4561f4dab7b3edfcdda5d5215242f3df3264789f4bffc86e8561e3d0aaf119e9fddf4fd26cdbcb8249df86328164a892531da47438598ff83bfcfeb03a8d548d7efe7ecf364be8c8bd9bd4daec4653787aa7a22c1fa8ccaaef8847a53d9847c1988a08927a1c4d2e22a416cbf780b9566f880801943f2156d4b8488e37d96ba", 0x171, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/76, 0x4c, 0x0, 0x0, 0x0) 01:50:12 executing program 2: r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCMGET(r0, 0x4004746a, 0x0) 01:50:13 executing program 1: mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x1011, 0xffffffffffffffff, 0x0) 01:50:13 executing program 4: open(&(0x7f0000000040)='./file0\x00', 0x610, 0x0) 01:50:13 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:13 executing program 3: pipe(&(0x7f0000000180)={0xffffffffffffffff}) read(r0, 0x0, 0x0) 01:50:13 executing program 2: syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @local, @val, {@ipv6}}, 0x0) 01:50:13 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) read(r0, &(0x7f00000001c0)=""/139, 0x8b) 01:50:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000140)=""/88, 0x58, 0x2, 0x0, 0x0) 01:50:13 executing program 2: openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x11, 0x0) 01:50:13 executing program 3: semget(0x2, 0x4, 0x210) 01:50:13 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:13 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:13 executing program 1: setrlimit(0x8, &(0x7f0000000000)={0x2, 0x80000001}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:50:14 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) [ 804.037161][T12109] binder: 12105:12109 ioctl c0306201 0 returned -14 01:50:14 executing program 2: open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open$dir(&(0x7f00000002c0)='./file0\x00', 0x0, 0x0) 01:50:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000040)=""/76, 0x4c, 0x0, 0x0, 0x0) sendto$unix(r0, &(0x7f0000000140)="e8", 0x1, 0x0, 0x0, 0x0) 01:50:14 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x2}, 0xc) 01:50:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:14 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:14 executing program 4: fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000002b00)) getrusage(0x0, &(0x7f0000002a40)) 01:50:14 executing program 2: r0 = socket$inet(0x2, 0x3, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x841, 0x0, 0x0) 01:50:14 executing program 3: open$dir(&(0x7f00000002c0)='./file0\x00', 0x200, 0x0) [ 804.548758][T12123] binder: 12121:12123 ioctl c0306201 0 returned -14 01:50:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$unix(r0, 0x0, &(0x7f0000000040)) 01:50:14 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:14 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:15 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fcntl$lock(r0, 0x3, 0x0) 01:50:15 executing program 3: syz_mount_image$ufs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000015c0)='./file0\x00', 0x0, 0x0, 0x0) 01:50:15 executing program 1: syz_mount_image$udf(0x0, &(0x7f0000000380)='./file0\x00', 0x1, 0x3, &(0x7f0000000640)=[{&(0x7f00000003c0)="04d503ccb7e3c3378b006ba841e08ad06e227936a5f3cdfc144022c1b88d4ef9ad1327a3c3ad54b2106194ad97c022187e1c98e5af2b075048aeba4d87bb86468b1c572fbd7bb33f09ce144983f456f0cce41923c1eef02089cfa94a7d3c5ac4e0549f6992a57d77", 0x68}, {&(0x7f00000004c0)}, {&(0x7f0000000540)="b9ee58f9d8991360aa52daee561bee9e92d2b9d26c49f64711c168d8683c441f34440a6cc2217b5e44c2ab622eb2387860a8d122cd1f5ea7754d8ad6b684549070fbd2970ced1ef8927c4432ac138e25aefd2e7d1d9e6c34138f5f53beda56014d9e4e23f61f7f", 0x67, 0x3ff}], 0x100401a, 0x0) [ 805.038976][T12137] binder: 12136:12137 ioctl c0306201 0 returned -14 01:50:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:15 executing program 2: bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) io_setup(0xffff, &(0x7f0000001500)) [ 805.387444][T12142] loop1: detected capacity change from 0 to 3 01:50:15 executing program 4: syz_mount_image$ufs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f00000014c0)=[{&(0x7f0000001440)='*', 0x1, 0xffffffff}], 0x0, &(0x7f00000017c0)=ANY=[]) 01:50:15 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 805.525766][ T2852] Dev loop1: unable to read RDB block 3 [ 805.525908][ T2852] loop1: unable to read partition table [ 805.526295][ T2852] loop1: partition table beyond EOD, truncated 01:50:15 executing program 1: syz_mount_image$ufs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0xa0c04, &(0x7f00000017c0)=ANY=[]) 01:50:15 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:15 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0cc5604, &(0x7f00000001c0)={0x0, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) [ 805.923417][T12153] loop4: detected capacity change from 0 to 264192 [ 805.975311][T12153] ufs: ufs was compiled with read-only support, can't be mounted as read-write 01:50:16 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x1b, 0x0, 0x0) [ 806.124973][T12160] binder: BINDER_SET_CONTEXT_MGR already set [ 806.125106][T12160] binder: 12157:12160 ioctl 4018620d 20000000 returned -16 01:50:16 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 01:50:16 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:16 executing program 2: ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0\x00'}) socketpair(0xf, 0x0, 0x0, &(0x7f00000000c0)) 01:50:16 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x4, 0x0, 0x1c) 01:50:16 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 806.586763][T12169] binder: BINDER_SET_CONTEXT_MGR already set [ 806.586808][T12169] binder: 12167:12169 ioctl 4018620d 20000000 returned -16 01:50:16 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@bloom_filter, 0x48) 01:50:16 executing program 3: syz_mount_image$udf(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x0) 01:50:16 executing program 2: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffc01]}, &(0x7f0000000240), 0x8) 01:50:16 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 01:50:16 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:17 executing program 4: syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000380)='./file0\x00', 0x0, 0x1, &(0x7f0000000640)=[{0x0, 0x0, 0x3ff}], 0x0, &(0x7f0000000680)) 01:50:17 executing program 2: openat$sysfs(0xffffff9c, &(0x7f00000011c0)='/sys/block/loop0', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 01:50:17 executing program 3: ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/module/nvmet_rdma', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) r0 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/module/nvmet_rdma', 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x40000, 0x0) syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000380)='./file0\x00', 0x1, 0x2, &(0x7f0000000640)=[{&(0x7f00000003c0)="04d503ccb7e3c3378b006ba841e08ad06e227936a5f3cdfc144022c1b88d4ef9ad1327a3c3ad54b2106194ad97c022187e1c98e5af2b075048aeba4d87bb86468b1c572fbd7bb33f09ce144983f456f0cce41923c1eef02089cfa94a7d3c5ac4e0549f6992a57d772376daabcc48d79d6493cea473c7b5b9c34ec2641cda175f03094ddfdb338de8d474815e865d6f94fa837fc51949457ea9ed86310b1d773c77e04f47b5f0f003e765eb62d247b8db883ce3717a01d8eba66fbef7967a69fa825a8f", 0xc3}, {0x0, 0x0, 0x3ff}], 0x100401a, &(0x7f0000000680)={[{@volume}, {@noadinicb}, {@unhide}, {@nostrict}, {}, {@lastblock}, {@volume={'volume', 0x3d, 0x5}}], [{@fsmagic}, {@smackfsroot={'smackfsroot', 0x3d, '('}}]}) 01:50:17 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:17 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:17 executing program 1: openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/module/geneve', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 807.406999][T12191] loop4: detected capacity change from 0 to 3 [ 807.438017][T12191] Dev loop4: unable to read RDB block 3 [ 807.438155][T12191] loop4: unable to read partition table 01:50:17 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x1, &(0x7f0000000080)=@raw=[@func], &(0x7f0000000100)='GPL\x00', 0x5, 0xf0, &(0x7f0000000140)=""/240, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 807.438901][T12191] loop4: partition table beyond EOD, truncated [ 807.439795][T12191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 807.486964][T12192] loop3: detected capacity change from 0 to 3 [ 807.499196][T12191] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 807.499567][T12191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 807.499682][T12191] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 807.499798][T12191] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 807.499895][T12191] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 807.499961][T12191] UDF-fs: Scanning with blocksize 512 failed [ 807.506507][T12194] binder: BINDER_SET_CONTEXT_MGR already set [ 807.506548][T12194] binder: 12186:12194 ioctl 4018620d 20000000 returned -16 [ 807.518561][T12191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 807.521294][T12191] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 807.521573][T12191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 807.521674][T12191] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 807.521777][T12191] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 807.521870][T12191] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 807.521932][T12191] UDF-fs: Scanning with blocksize 1024 failed [ 807.527258][T12191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 01:50:17 executing program 1: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 01:50:17 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:17 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001380), 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) [ 807.527477][T12191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 807.527577][T12191] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 807.527637][T12191] UDF-fs: Scanning with blocksize 2048 failed [ 807.530776][T12192] Dev loop3: unable to read RDB block 3 [ 807.530909][T12192] loop3: unable to read partition table [ 807.531380][T12192] loop3: partition table beyond EOD, truncated [ 807.531978][T12192] UDF-fs: bad mount option "fsmagic=0x0000000000000000" or missing value [ 807.574032][T12191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 807.574268][T12191] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 807.574376][T12191] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 807.574441][T12191] UDF-fs: Scanning with blocksize 4096 failed [ 807.574488][T12191] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) 01:50:17 executing program 4: syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000380)='./file0\x00', 0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000000680)) 01:50:18 executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x9, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc04c560f, &(0x7f00000000c0)=@overlay={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "618888dd"}}) 01:50:18 executing program 2: io_setup(0xffff, &(0x7f0000001500)) 01:50:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:18 executing program 1: socket$bt_hidp(0x1f, 0x3, 0x6) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_mount_image$udf(&(0x7f0000000200), &(0x7f0000000380)='./file0\x00', 0x1, 0x1, &(0x7f0000000640)=[{&(0x7f00000004c0), 0x0, 0x9}], 0x100401a, &(0x7f0000000680)={[{@noadinicb}, {@unhide}, {}, {@lastblock}]}) 01:50:18 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000200)={0x6, 'virt_wifi0\x00'}) 01:50:18 executing program 3: openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/module/nvmet_rdma', 0x0, 0x0) 01:50:18 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:18 executing program 1: bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000001140)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:19 executing program 3: openat$drirender128(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) 01:50:19 executing program 4: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000009040)) 01:50:19 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 808.239519][T12206] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 808.239598][T12206] UDF-fs: Scanning with blocksize 512 failed [ 808.241066][T12206] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 808.241141][T12206] UDF-fs: Scanning with blocksize 1024 failed [ 808.257925][T12206] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found [ 808.258002][T12206] UDF-fs: Scanning with blocksize 2048 failed [ 808.259232][T12206] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found 01:50:19 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)=0x40) [ 808.259302][T12206] UDF-fs: Scanning with blocksize 4096 failed [ 808.648338][T12214] binder: 12211:12214 ioctl c0306201 20001480 returned -14 [ 808.651428][T12214] binder_alloc: 12211: binder_alloc_buf, no vma [ 808.653380][T12215] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 808.653452][T12215] UDF-fs: Scanning with blocksize 512 failed [ 808.672812][T12215] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 808.672889][T12215] UDF-fs: Scanning with blocksize 1024 failed 01:50:19 executing program 1: munmap(&(0x7f0000b23000/0x400000)=nil, 0x400000) [ 808.679050][T12215] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 808.679125][T12215] UDF-fs: Scanning with blocksize 2048 failed [ 808.681864][T12215] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 808.681939][T12215] UDF-fs: Scanning with blocksize 4096 failed [ 808.681983][T12215] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) 01:50:19 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:19 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@bloom_filter={0x1e, 0x2}, 0x48) 01:50:19 executing program 3: syz_mount_image$udf(0x0, 0x0, 0x0, 0x1, &(0x7f0000000640)=[{&(0x7f00000003c0)="04", 0x1}], 0x0, 0x0) 01:50:19 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0x30, 0x0, &(0x7f0000000300)) 01:50:19 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:19 executing program 1: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)) 01:50:20 executing program 4: syz_mount_image$udf(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)) 01:50:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xe, &(0x7f0000000100), 0x4) [ 809.365218][T12225] binder: 12223:12225 ioctl c0306201 20001480 returned -14 [ 809.881529][T12241] binder: 12239:12241 ioctl c0306201 20001480 returned -14 [ 809.894115][T12241] binder_alloc: 12239: binder_alloc_buf, no vma 01:50:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_hsr\x00', &(0x7f0000000240)=@ethtool_rxfh={0x47, 0x0, 0x0, 0x0, 0x0, "283f86"}}) 01:50:20 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}], {0x14, 0x10}}, 0x84}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 01:50:20 executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x22, &(0x7f0000001140)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 810.315809][T12253] binder: 12251:12253 ioctl c0306201 20001480 returned -14 01:50:20 executing program 3: r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000009300)={0x6, 'bond0\x00'}) 01:50:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:20 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x3, 0x0, 0x0) 01:50:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000440)={&(0x7f00000001c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) [ 810.738006][T12267] binder: 12263:12267 ioctl c0306201 20001480 returned -14 01:50:20 executing program 3: r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x2}}, 0x0) write(r0, &(0x7f0000000240)="241400001a0025f00485bc04fef7001d020b49ff70880000800328000802010001010000bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 01:50:20 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:20 executing program 1: ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000480)={0x6, 'team0\x00'}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 01:50:20 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh={0x26, 0x0, 0x0, 0x0, 0x0, "eb920c"}}) [ 811.178299][T12275] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 811.178373][T12275] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 811.178434][T12275] netlink: 4548 bytes leftover after parsing attributes in process `syz-executor.3'. [ 811.291328][T12279] binder: 12272:12279 ioctl c0306201 20001480 returned -14 01:50:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000004040)=@tipc=@id, 0x80) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {}, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 01:50:21 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 01:50:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:21 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 01:50:21 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x5, &(0x7f0000000100), 0x4) 01:50:21 executing program 4: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000040)=0x1000, 0x4) [ 811.825569][T12290] binder: 12286:12290 ioctl c0306201 20001480 returned -14 [ 811.830112][T12290] binder: 12286:12290 ioctl c0306201 0 returned -14 01:50:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 01:50:22 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000)=0x7, 0x4) 01:50:22 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000004040)=@tipc=@id, 0x80) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {}, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 01:50:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x24, &(0x7f0000000100), 0x4) 01:50:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2c, &(0x7f0000000100), 0x4) [ 812.278772][T12301] binder: 12298:12301 ioctl c0306201 20001480 returned -14 [ 812.280330][T12301] binder: 12298:12301 ioctl c0306201 0 returned -14 01:50:22 executing program 1: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000000)="6469bddcecc6273a") 01:50:22 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:22 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@generic) 01:50:22 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 01:50:22 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14}, 0x14}}, 0x0) 01:50:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000004040)=@tipc=@id, 0x80) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {}, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 01:50:22 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh={0x41, 0x0, 0x0, 0x0, 0x0, "eb920c"}}) 01:50:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8943, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) [ 812.817643][T12319] binder: 12315:12319 ioctl c0306201 20001480 returned -14 [ 812.835450][T12319] binder: 12315:12319 ioctl c0306201 0 returned -14 01:50:22 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180), 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10140, 0x0) 01:50:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:50:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000004040)=@tipc=@id, 0x80) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {}, 0x8}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) 01:50:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8912, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) 01:50:23 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 813.273737][T12330] binder: 12327:12330 ioctl c0306201 20001480 returned -14 01:50:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'ip6tnl0\x00', 0x3ff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000004040)=@tipc=@id, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'caif0\x00', {}, 0x1ff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'xfrm0\x00', {0x5}, 0xff06}) 01:50:23 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:50:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x9, &(0x7f0000000100), 0x4) 01:50:23 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:23 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f0000000080)=@ethtool_cmd={0x20, 0x6}}) [ 813.771443][T12344] binder: 12341:12344 ioctl c0306201 20001480 returned -14 [ 813.852040][T12338] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 01:50:24 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0xa, &(0x7f0000000100), 0x4) 01:50:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:50:24 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 814.168513][T12338] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 01:50:24 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, 0xffffffffffffffff) 01:50:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'ip6tnl0\x00', 0x3ff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r1, 0x0, 0x0, 0x0, &(0x7f0000004040)=@tipc=@id, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'caif0\x00', {}, 0x1ff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x8, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'xfrm0\x00', {0x5}, 0xff06}) [ 814.361997][T12353] binder: 12352:12353 ioctl c0306201 20001480 returned -14 [ 814.407819][T12338] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 01:50:24 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) [ 814.787444][T12363] binder: 12361:12363 ioctl c0306201 20001480 returned -14 [ 814.862987][T12338] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.002446][T12338] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.067396][T12338] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 01:50:25 executing program 1: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) [ 815.124921][T12338] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.139017][T12338] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 01:50:25 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, 0x0, 0x0, 0x20000850, &(0x7f0000004040)=@ethernet={0x1, @broadcast}, 0x80) 01:50:25 executing program 3: setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x7ffffffff000) 01:50:25 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:25 executing program 4: ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x3, 'caif0\x00', {0x1f}, 0x405}) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(r0, 0x0, 0xffffffffffffffe9, 0x0, &(0x7f0000004040)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'syz_tun\x00', {}, 0x4}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x6, &(0x7f0000000140)=0x20, 0x4) r1 = socket$pppl2tp(0x18, 0x1, 0x1) sendto(0xffffffffffffffff, 0x0, 0x0, 0x14044814, &(0x7f0000004040)=@nfc={0x27, 0x0, 0x1}, 0x80) getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000080)={0x7, 0x7, 0x3}, &(0x7f00000000c0)=0x28) 01:50:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) [ 815.310902][T12366] binder: 12364:12366 ioctl c0306201 20001480 returned -14 01:50:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8982, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) 01:50:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0x4}, 0xff}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'team0\x00', {0x2, 0x0, @multicast2}}) 01:50:25 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0}) 01:50:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 01:50:25 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 815.536602][T12375] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 01:50:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh={0x0, 0x0, 0x0, 0x0, 0x0, "eb920c"}}) [ 815.717186][T12375] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.818848][T12382] binder: 12379:12382 ioctl c0306201 20001480 returned -14 [ 815.856570][T12375] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 815.979360][T12375] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.581741][T12375] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.596150][T12375] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.609215][T12375] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 01:50:30 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, 0x0, 0xfffffffffffffff9}) 01:50:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8916, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) 01:50:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0x4}, 0xff}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'team0\x00', {0x2, 0x0, @multicast2}}) 01:50:30 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:30 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:30 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x222840, 0x0) [ 820.623441][T12375] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.796845][T12395] binder: 12392:12395 ioctl c0306201 20001480 returned -14 01:50:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)) 01:50:30 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "c138be0068915531c9b0c7239e809afcf8dc9948b08b53e0e60a9e5af3201abfbfabece6c364be3cc28d00908e515a8e70e7a5d32b867e369d237468635dd4", 0xe}, 0x60) socket$pppl2tp(0x18, 0x1, 0x1) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 01:50:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0x4}, 0xff}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'team0\x00', {0x2, 0x0, @multicast2}}) 01:50:31 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:31 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x4}, 0x0, &(0x7f00000000c0), &(0x7f0000000100), 0x0) 01:50:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 01:50:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x12, &(0x7f0000000100), 0x4) [ 821.361482][T12412] binder: 12409:12412 ioctl c0306201 20001480 returned -14 01:50:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0x4}, 0xff}) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000000)={'team0\x00', {0x2, 0x0, @multicast2}}) 01:50:31 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, &(0x7f00000004c0)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 01:50:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x6, 0xa, 0x0, &(0x7f0000000040)) 01:50:31 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:31 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x4}, 0x48) 01:50:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh={0x10, 0x0, 0x0, 0x0, 0x0, "eb920c"}}) 01:50:31 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8929, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) [ 821.847043][T12424] binder: 12420:12424 ioctl c0306201 20001480 returned -14 01:50:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'gre0\x00', {0x2, 0x0, @rand_addr=0x64010101}}) 01:50:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 01:50:32 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh={0x10, 0x0, 0x0, 0x0, 0x0, "eb920c"}}) 01:50:32 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x201}, 0x14}}, 0x0) 01:50:32 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh={0x25, 0x0, 0x0, 0x0, 0x0, "eb920c"}}) [ 822.354586][T12434] binder: 12433:12434 ioctl c0306201 20001480 returned -14 [ 822.396019][T12434] binder: transaction release 459 bad object at offset 0, size 0 [ 822.396098][T12434] binder: transaction release 459 bad object at offset 0, size 0 [ 822.396165][T12434] binder: transaction release 459 bad object at offset 0, size 0 01:50:32 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 01:50:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 01:50:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x4020940d, 0x0) 01:50:32 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:32 executing program 4: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "c138be0068915531c9b0c7239e809afcf8dc9948b08b53e0e60a9e5af3201abfbfabece6c364be3cc28d00908e515a8e70e7a5d32b867e369d237468635dd4"}, 0x60) 01:50:32 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) [ 822.951509][T12449] binder: 12446:12449 ioctl c0306201 20001480 returned -14 01:50:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000200)) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @local}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) sendmsg$inet(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="b6ecc75454414baed06c44c640f3905d0d9c78d47a030a6b557ef3646424e838636b2e42728e9696053d1702717e43ccb124272dc6dda64a171872011f91f9aaa108e10babf43f019ff05ca63803f05e60424231d6e1430a307c13ba505e3567d202d043e9e2836a148da186b1c6f707b365dc7dbf2dea71d669fb0aaed474659bb567186a8847b5b510e24eadc3f90c18e8ec5a2a0a83bb9833b3e672b0a89ddee07212a9daeedb0ad37c61dcb6f71176583949e6f052585989576cf40e160a7a99e0b4e496cd2598dca5ab93b11ab14d5836edbeab", 0xd6}], 0x1, &(0x7f0000000480)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_retopts={{0xec, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0x88, 0x1, 0x5, [{@loopback, 0x2e}, {@local, 0xd21}, {@broadcast, 0x200}, {@private=0xa010102, 0x597d}, {@rand_addr=0x64010100, 0x6}]}, @timestamp_addr={0x44, 0x4c, 0x24, 0x1, 0x4, [{@rand_addr=0x64010101, 0x5}, {@private=0xa010100, 0x2}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x64c}, {@multicast1, 0x1}, {@rand_addr=0x64010101, 0x9}, {@broadcast, 0x4}, {@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010100, 0x9}]}, @timestamp={0x44, 0x10, 0x29, 0x0, 0x1, [0xbb0, 0x2, 0x6]}, @generic={0x94, 0x10, "ef8a66958692d9ff00bbf9065aa9"}, @ssrr={0x89, 0xf, 0xde, [@multicast2, @loopback, @broadcast]}, @end, @timestamp={0x44, 0x1c, 0x88, 0x0, 0x6, [0x4, 0x7, 0x0, 0xfffffffb, 0x40, 0x8]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x6, 0x12, "96dd13b7b5a73c50eb9b74d783664a42"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x1d8}, 0x40081) r2 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0x60, 0x80000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000005680)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x8000}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002d80)={'ip6gre0\x00', &(0x7f0000002d00)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x1f, 0x3, 0x60, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x7, 0x1, 0x9}}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000003240)={r0}) [ 822.993295][T12449] binder: transaction release 464 bad object at offset 0, size 0 [ 822.993372][T12449] binder: transaction release 464 bad object at offset 0, size 0 [ 822.993439][T12449] binder: transaction release 464 bad object at offset 0, size 0 sendmmsg(r1, &(0x7f000000d800)=[{{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x4, 0x0, 0x3, {0xa, 0x4e24, 0x6, @private0, 0x9}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000680)="c82308de4b9eb952bec9c50cc86a6ce51b632dbf90d8b0cf97ce2ef60f251d58f90e212dba45bf71b16497e43a1b67625c4399104765244263f0e5bcf4117a912749fa2a0074ce8d3b93266d7e9446e5e756c739cf81b667c9aae4696d844360f343b07753de3e72095d7a47ea8173f780c1d3291014d7dae526577e5b481d7df3af449a9c88c53d2c7e409ee9", 0x8d}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="09bbbfe5131b44c2c385dab8ba822b964669bb3c13e7aa134644add656c87ef548aa25ab4c755577e32c9a52f44c7cf1b6a1144a02b1a218c303347d120ab581a484059c19ba3e74c59a40c8de020ed68f209912ce931bb258953f1512e059d71e20212f2ca85f06599f8254adda5a7c1aa1f10d5c1ab9dda8ec6f", 0x7b}], 0x3}}, {{&(0x7f00000017c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000400)="aee8c719348a2265d6", 0x9}], 0x1, &(0x7f0000001880)=[{0x58, 0x102, 0x98e, "eea948a50df2b7e21e009bb39116af47fdbcc0326f627a806bbee16a7086de0a0516650e1b15231a64efa0ab2242de67cab5154600a0c71eed18e5caa1319c04c87c5a68d10c"}, {0x28, 0xff, 0xffffe211, "188e1511da7b6d040cd3a40da4cb8a6ea8b964fcc3ba87"}, {0x1010, 0x103, 0x634, "cf4f7be658b7efa8eb8adf569815345c3a4381096a749189bb6c66ea1f4c23df18c5017382966aff10e5b7cf629ed3d6dadc2a5b34d5541e62ae87c10dabaea3e891ddb352a0f6bb8449b60ea36c881441f9665a264a63ca5f9175058ae9195a6b75bb3f02993cba0e192f6ad2b10232f8a40ee4f5a205d31cb7e596948e34ce67fdaba53b1c205d2e05048d48fa5b73e3bf44bc445310afb2aa7a9a6603bbdd00a40aeeb2fa5cf86a67ec5cadee27fb375fa828fad48364c738dbbe60c8a61d31f14f2cf97839cbc4daef5f3ef9b7d68df872b330ae4722211139fee0216aef10bd475ad3091e79492b3696ed78c72b9f258a5b70bd73014b094e8b95683bff5badd4f21469791b287ef486368ac1e89fb32ade7fe2fb0a4f60bc6d1390ad970d84c000d2a2f7af7dcbdda0b006c73c862080da40fe9f25bef5f9d214246259b19296ac86cb1bbdd99ec16e6b20f2f350bee7a53148e8a0e130962b631b50b4ae94edb3d6180004dea99427a8a2ad1d8fe887c6f5833ec1bfaa33e9a846769d72c08210f3cb31266d2e8579b247e6c90d7d108bff123b417e5e31acec4e53faf5386c1e16c16eb2a1bf06955343aba74cd21b8a8e4aa0faef0502d1bafe36d85ed78a48f80adad6aa94a552c80eb06d36657b7292cf4abbf3fa1762c04279275c66c72ffc779df16bc61f2bb6c3406b8bc34f5e091b07da3a7c9b98116de4850c0a9611397bc28966592464aeb0cc2aa007cf16d17b332e316f7e944d5578d9cd69545c7b83ab7864b831c9b8e638cc257b0d9c763227f9b788e2f62fc517a2b7f4258caee50b44f04864a28b782125143898c354f5c88187d16a185dde4cc242cca53f5c21f0d42ac1862e4197778af72f9d572767a1bb704493b473cb81c5e3915b0a5c5f834fa6777a95887c1c50799c1cb7e647ea93d4f4ef932561eacf5aea31622cf5cebf8b346cd519746294f35c929369798bcd4317c5917e6d9d161d07121e24ca04ae141e6fd482bc302e7c6cbb7feafedef78e902a3ae1fcdc186be10bb68eb22d78c0f787605c1cb55de7a0220c820d264f9be560852f71a0410f95b102586513714226d8488638681ce5b53390e5bde08ac24218852c55cdfe1cef34c98f0a47f70821cebd8e052b05d2401d840ac3a6cc8a9eb612eb23d6498a6dd5e0a595ab7124ed1fd06ff6f1b7c74250964a21e7564e3fd4fa0ac7787dd3e82aac2dce11f1ff7c57a0a31fc7eb756cab2421582b3f34e72e9abfee2f840fb83070f91f171f874ee544ba3b0708e6636b9c08fc8541449f4a8ebaead5cee31048a2820105c43295625ab317543b8d419062aa1496afef2160cff069291028e10f69ab6a7e6a77d73e6e332b8b2cfea5cd07a2628bc3594708181bf85aa2efff7daf4b1b244c251309dd81c8c6e9967b6d0bc9c9f4abd6f2a473afb017ab9553bf38cef0bfc70fa27ab4c8da19ed132b1f3f4cf860027644f79346bc11c7f370fd2b9bc0948b1e6795e093ddc204639761c698d9c63bf220838fff072c886c996f19fca8b41192a9c96dd52b8e610cd9ccdefbad6fe6edbf86313d537bfdc25d548a110cab4db073a383aad7f11884a2fffb2861fc43607e10a5f61bf89455c9c926a8ccd08ff766b1e781f7bb55001c54a7a22119cfa86a44140ad2ddbffd0cf01a821441758aa941d607db10e9067bd39d984b838d959caec039ffda96083280ed839be9c1717650a16767f42040c63836d14d26efaf0a8bb23ab5f16ebd5aaf2a6625b1323bd3dd90953748d33f0bb663f635aff84014a62f3e6c9720d4c7de990198897fe043c7bde712440b0728e728b259be03ded533f92166f136f42549440a50a77421e619795076eb8d33afefe72a7ab7221b49a277dd70f52de66f4ef079c65286327980e0abb56513288fa6f12622f750f6f22ff8de766d9ef7bedb24440f1eb20cc6080d6aa67061b3f5ee3947f2976d90c9f8cfd878d60d08b96b8f066f5905642e3b9eaa2121cad4724ed3ea4e985b2dae789c0b584046c3d5fdfa3c4e923dbcc73ab30afb8aa4024da23a3c696a8fb55fa44c9d7f59e3d23127016ba93c8309ed3d51df00eb4f03b357a246aeda1ea8a0110f9097ec03d970363256e86dad3d944f46ed41bed8d229f7b827eb67f6d18562977a6a062ce387ad3965fcf9e18ea36f5a4792a82562652989ae974878a04013b72610236dec1791939230c435da1d436724ac92f0dcc22deca6961400bb29ff3472aa19da8cb05e3b034ec6dd362526243fa35a8ba9547b18ba6d712978d6ec2f90c261fb67e8c874e2e6ea07f270a6f7d3f86381c917fe281da41295f604594eca7b6d64d1b12089fadb7db5d526a98cac9a7d39a56a7f0469ccaa4b25e8bd3ba6d7a98d64448c4a7b9e5f2b04f71b4ec899ba4d1f8fb4f9a7ab3480fd42f8770786f94c0256d7b447e7b71b0258e24f248e98dd86d12c4f6267ec9c011a92336dd8954119ccdaff6e163ed1845a8792074becec202d17d9546fb7151881a85919ca01bbe5c3447acc6961f1a0135b69738b540ca7b7254684e8898f7d3c63a85a2129b058e252ad249859b9eff1e17a1f1a316334254e62e0b81f734066cf7d1d161a504a8bed931258c84fd499ba946cbb7e58e543145570b24706f1dd546490d7c42e5288ee7cb043ec516c3f93d442d5cd69234f117acea0e9c9dd2669c85dc42f58a7135b0978c518337b107ea9c5b508a114c1994b03b2fe99ff779d87fca2c864a9f45bf9cbbb53ddc4a6c869f00bebd21d0a36b36d73ee551e33f0fac43537b10cfbb3f908c65d4046064f621e78e7ac42f1901fa6de5448e4fa28bac8fa9ca097f26133bfbc6c51cb3db83d558ea36ab367a0c44d07726c80fdf693ea4891afc21d275327e7ad74dd5235b255a46f040888fe80e437f816514460f8e9cc6e263dceb991efc16b937cbb8d42a846702d64af84985cfeb70159000171110b1e0ad46b58a44b4e665d0790adbdbfdbefed7a4244157f794e9ad4373035fe72e761e0937d79516a93d5a960379bf739fc26947c119d14f8bc8d917ff7bae56543b980b4e2a3ab92d6c4e6208d8e74f0b40b1bd4ff02a08dc5d45d7a44f054df8f955272fc9c99c98f34bf259bdc2a562d72b8240c15663ce4cbb3b1d6592b520752bbe57e1899577be1c6c42bc3f328b601c90b23d19e1a5b54459f551ade8bdcb95e637b8afb24942a6e8e86d5554534420b16f7ca006a07923989785f14ff1c07ae40b21c63ac3277639c4bbf2ca496b13e7616cfff5b67abb7d5ca3d394ff1725be03c45689b53fb6f3394848781aaf4f86a1d1cf8dc5e6dad0feefb1b3e8789fa3faff3af9ad03c5ce19208bdfef73f38eb44ac1403637edfb0eac787c196d5b0bebc117ee16befae2fa0a4c0527e8e1906d90161dbf911110d0991bc20ea5509e72935356db2ab7e73fa16d517c877dfce16c35ccb05172bb59eaaa58f40ff970967115a68dd9a6d170eb0acd23874d966c86d4fe1d08011138a2cb4ee8580faa6a1bd59538e510b4786182ff8bb2aa2cc5f4cb982205807308d898822815d1425149c96b74ed665c3491bcfe62df07bf7ae7e3cf9be94a10b1583771eaade36660fc2865347cc3802f2696bffd13912e4f31f8f510250ab549610f46456a3adf2701f955d9caeb20738e8b521fc3363ebffe324bde437f698ee5c7f232241e6599dddd8652e29aa664c4389bea83bf19a04fcfa2207513952747d514eaeba5c603f6b93c27740d115633f6cf7c69e5dae3fa04877f8bc330e2889702e78bc5dd297c9c3cd6f76cc9f50b2d82d4d4f058e808534ed6f0bab7fe40c21f3229ce337736111c3280ca7d8725e86957dbb42dc1ee78ba903b1d19e4c0c239334180756df1ad7e3b679e148af8166b11519fc0b43b5b615e01fd102016b7d72b23cde84700bdf9046067995be02793d2e9c311427b42a5c8bac50a9b49dfa5e7c7f6377944848cb2d7db93de840daa5906202437b76fe6b1efb7e0f5b1dbb72528c1e91fd8c770b32c915d6178939ab651faed0c30e3af0b2e14d0721167492da5a96de76fa08b9e752c67d6d44a2b3652d58dd249d47e0f867b222c66142a5c5577ba4b668a92c996bed8511a122e800ed30732f3ec7fb6e2e169b529c8e5d69217f9af4a73c9b7368efc893af0b1b2371267bee90a6213a1c85bb9a6bf05fb7478eb48130200529cbed3e88a20a19325a8827e48764754208bd91a0fa1f1c6a2d79ffed9dc9f698b2e172420d5fa2224d1fe05840f5d0f4c886eada6ca250061e012641792368c15f92cb19d78346ea920bf547ccd6e4a771bc17406492ba3dc5a59926821d07f6f9c35e5a606f32d256e52be4e329184c3f90446a9c2f60268a09a300d4c98cbc294204278b16779cf4587edeb70f97633af9a260a0acba087a44c36d5ac589c717a59722f0fda1825651455db3f4c64d895ddb00e5624c929c94689faaf08eac3169a58c316014ded73b6ec446b9ac7d44bf83950605798bade0a193c59c64a920364f8307bd8a91cd0d7e7d186520d36900de2512d22e5d09cac458c7f6d44be583d2fe2429989aa9e293b07c522757621e61bcdaf1b9d38fbac793784adcb5131d20d00cf1e6bbc7dcb8a03615c1b3ccc00afcb33bd85e8020b6a91b0e6547c168d69cb299f09f0bac81ab766692736cdf77d73bcaa5e3cdc97e575990fff14e4a2f75c6f90f767fa1c481b12b21b8c897106b7df4a34bdaacc445bcc6df922d8740c6d04d447a23964d59b6eaaaac8e2c4470a5fdc9b47b78c889bd47569edccfb8a4daddda563a8f6c7897b6513517c059351d4e7a20e6cde58da67f224307c7451bdb8bf3af94e00fde9e160f892b40c5c247a4b3a1fd6939fb3b51ec75921ad70dcfb16b993a7ea3afcdb54e46f7275765f89998e528ac837986d14c7399e76d22c7c6385cb5e6ef629fa7ee3bfe08493341caeeef154d99fb5aa8eb9244e73002dec2f1a70403ea065a73b80bccae6fbc5f6a5b073a61d060dcd28829a39454b907cf5e4985fb0f46503d4981cd7c02418c1251382ebf2db1cc7c905e60ab6819e254fd006bf5ae06bbced208aedfeb2a95e2633def7e8f614aa8c3d49a3ada1dcb1f17f16aba05053b8cbba8191862ac682154627b49d8c77c1fab093f59451bf3ebe85bbf70c09560a1eec75bf4101c36941aa0fcd3b5ee969eac4af8761bbaa55021d00611b2c9b6becb61d44b31e24b3bb17db938e1e4a82ad239cc2f6851d9bf41a7fa7b47f00bd3b5276e357a77ba89bae5defdebfd75577c65eb8f4a4763991cee376d0a366d4c1ed6d075e852851458d5f01d8699522d541fa5a3947b9456a8c62b8411e0b506252f52c87d3608584d9e87a596afa3be1dd8411b32777aeafc2814b8dfe9c5fda5f22981b9678c352c68144953d63c24882e059f7b276b25acfa1ac270a903f3d3f27cc267420a9c288cba338826509884e525ceb0f71b7b9d2b19a81ec6770b5c8f95a4368e59a47e971221642114a0d37c10f0b4154658c0600efcf44f2e0f9218e9b63180e699ceb6253dc71a2660933d128b69d616460a9942c154671ab85775e109e299af499bfb7dca576e909651f9e9141102308fb5d414069198cf52d6616511a00d4fa373bc20c3050437617191f726d9545494e0f4754a7682b4c68c942645c46796ddba02bc1cfbb0b68f8f259d1691c3dd78c4edb500fc24b062b77f606b66dc2047f7a62f64804d31a27bb84a29d64ce873f1881c2b556465f104140098812a1112cf24d5"}, {0x40, 0x10e, 0x400, "c592e14f03abf27d2b5f87364fd3bcf15915c248b3becb52ee8618daadc44605fc432d90a53ae39a09a3509495"}, {0x110, 0x10f, 0xcb, "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"}, {0xb0, 0x0, 0x3, "97906cd3cef93ef25f81de50ea748920024de6f8a4d8e78c2840743a9d66d492abb190e6b0b49fb0eab52b93dbb1fd70546e35fa941b6ddf8e10cef5d17b57a59da336989aaa6c6d2196e64a8152375e4d271ba3e434cfc94f5ac56106d3e4e5002c123cfb1d499245ccec2b142dc7ee2470f5fb7fc63a633b58efdd5957f408779e1d9253c578d6f28eeddaafb353b32b8b6cdd7747c07ada7883d2296bb4"}, {0x60, 0x114, 0xb6, "d50be30f1e0fb4287c8bed9278c110c71af425b697ce19fc8add9147767d3568b277c27d31bd238d90852f41ff86584686c8a159745082fcfa4d61d851ab7090a7ebaf0a4050a5c7a7c6174d316801"}, {0xa0, 0x118, 0x1, "b9cfa7cbe27dedf11e17ca83752fc3d18ee1697dccf7255f7eaf066b7005f9d976d0386ec37714312bf67c96da5f705c399f3ab78b977a7298d7f42b00f9a819949dbfbe73239bde5748fe2f3287ac32309ae06b920bf424a739403bf16e8fcf02425770c2628c07899e64d4053dd9d309ba8b3d56969c0100f7c7029af8b378e4782f7b80390eef97d3da"}, {0xc8, 0x102, 0x10000, "9c9376ed5a69ae5b00d8c3862b8b2638fdf6af5ce480f851c6e52e543b9facc3e3ce43e2414bf00d8e23b11660fec854d804635a9360f9530aac3ea2cd81be35d2692f713e452c0a3fff0621a570565122855797d69ae767a149d0fc5c00742dd0434c9efb63c8f952c8ade1381e2ea1467b6f995f61bf1ef3469b26986f2d5ed2b44c18d11654fe638368caab328fe14ff5054a886a45a3f8fa481b3e988e427c43c617bddd35f3e42db2bd1398e47c4711eb72bffe"}], 0x1458}}, {{&(0x7f0000002dc0)=@can={0x1d, r3}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002e40)="9e74006cf937eecbd43b8185514034", 0xf}, {&(0x7f0000002e80)="8651883fd1db945d1193354de42fc199078bd7d711963207b140eb8d555d1551b8eea6ad2ff96bd2317d8ca6d02414945b6f99e485bde39cc9b2098187c081fb1df3287b8d39baa25a52151b986fb4fdf24f4a39b4526aadb08b4485405a25a249e648966b310668795e4afc848e12a3cdd8dfd695327dd6f5a4e58393c56750037815a9f04e799a0b6640f059d299c7ae29362d2b4d066762a4dcb9fb7be326144e894887a1c729b427b2075563176221192b4eb7a53a5dc58371e95c95ec593712cfda8e9f9cca4883b2dc04e15792f7c568c820", 0xd5}], 0x2, &(0x7f0000002fc0)=[{0x60, 0x84, 0x975, "a729691419e987e55310cbe0272e8628691dacfe3e8912f5477b317ff591a1712e07c6a9115453838c184f38125812de35af9a9aeb663e076f6c1730a48dd8cfd898ccff65b9d00684d9968bc7dd3d"}, {0x28, 0x110, 0x379b089a, "0c2d5a73174d4a25b2e2450eec0d2256f11e"}, {0x100, 0x109, 0x3, "aa53aab633197c9694b69dbe19673756ba246b9dbe4df9c6c56662cc68f63a265b946203aa49060771c30200e3e48ab46ad8a6559b9a0088251381720889c0562f993bdcfa7979ca49692f5cf7a566ddb30254b69504b8210028e9d31af9a37bfb878f80ece09bd07650b2c4e6f55127401fe81861c4dfd8280610eb7bac251f1ff0213a41ac8e37a7d24163da200fe6d5f9da8ab406afc1662891629fa4d265f73c0511c7083c11ffdd4b59b9b481828868a1dbd42ad2cb71909e1045fd3d520cc986d53cc6700e463531be75eee672e55f9a5b1d3fd638f3099df2ad4d225e4265e5b9a7482cfa817be3fe4e"}, {0xc0, 0x84, 0x100, "99d29c66e78ad1e3725eaa95c2f9bf4830cecff9fd2b0a86b2df818e45afaf9d46f6894b6fc44da87312124aed466598f7e4ee72391b4ebbb704fbe82f07e9a43a760c816aa50bb088cbcfd029d4bb2b8066978da1f8755422e98615aecbe478faf574e237ff8c80fde89d4c0136bf897a8633cf9f88b61ec95f6f56811318a76cf4974879bab8774398fdc252135872336d50dbd57fbee6ce1a57676df9959f0a771d1dd69cf30dea4764d33ca8"}], 0x248}}, {{&(0x7f0000003280)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x2, 0x1, 0x1, 0x2, {0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}}}, 0x80, &(0x7f0000005600)=[{&(0x7f0000003300)="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", 0x1000}, {&(0x7f0000004300)="74e1fdcfacfa8b55d6ff807a997cb946a0c785f61d8b1248b7e1d4b813817c8ecdfb9934b89eca82a738e357342411be624f43337ac0f408acd9201dfbd4b54bb5c6dade8d393c12d037e314877eaee8f4097c", 0x53}, {&(0x7f0000004380)="c1fff025ff8c16a21309224831a62fd433d1db576f7793d2ea2601476e86ecac081154dcd7c2fa2af01004b2e01d6b651161f59f2968a70a0763850d64ce9ae2fa590b554a4032507f41", 0x4a}, {&(0x7f0000004400)="8dd1386c5b477153c36a2e5aefb5b3164086161d542e794d1970c7ae3d8997d775698f9565ee80b25c753cf09988f23241a185f93c2f26e81c04ee612635138b8d7fd4ad01f0d4a8b12e343133324606fd95d3c4b1f7ef415e286ae487cbd3e93d1aee27d0", 0x65}, {&(0x7f0000004480)="081c8bc2f7b696c9af4881087e5bc5c482f5", 0x12}, {&(0x7f00000044c0)="3d20cc0988775162bd1c62b0097708e8590b459f57e958abe8d8985f3bc6cc9c6e70e18807eb59e39024c84e550326e3a5da8b43e89e4f1a5800239733a5931eb5390ae76aa87595bb5a83015857c0717dedacb879294591eaee676a0d596c75d8f855f0e5bd02e1dfe6354bce73afae8c80adc44b365913d624fc46cd6c7d855093267241b59c407d4c4289dd42361a24714b791ca0f6c9b42a15c4e385a9933ff9f8404d9f84d371c130799e22ae6dfbe0180e8d27ee7e8dbaba4d3c181c1036d2129316368a13", 0xc8}, {&(0x7f00000045c0)="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", 0x1000}, {&(0x7f00000055c0)="478754e309194ef46fc1ec4a14144223f8efd8d32e5c66299ee66078a0c1d8cf02d7", 0x22}], 0x8}}, {{0x0, 0x0, &(0x7f0000005680)}}, {{&(0x7f00000056c0)=@in6={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x80, &(0x7f0000005900)=[{&(0x7f0000005740)="1cef60c96068a2e284f932c5a7b14da9afda256ebb32f595446f9bf03b21a7514a3ccb30464524392a8a00197a7fce3337ce30159fc83d187c26986621ed96f64f08fae80f8b27ac27392581e968eb1468e277324cef4f9ebfc7238776c5de7f9602ebd946cb613e8ae02d1a8f0640", 0x6f}, {&(0x7f00000057c0)="85c17eee2fc62fa6f84f7b861be6178e74d46c078ecb2880c71137935dd6fd1a8e89074e448335c149a3e7df65ac4721b9e402d60969db3595f7771100b0a8b452da07cae0b892e46ff2f6a7f269b18f986e1159a46868442259db2c1ff56b96529fdd0fc293e4868b791f4231d51027142b9e1682e3669bd38448de5f11541b15384c635560e685fd31102893e4ebb6a9be5a7626b8128338ff9b60cbb7a30feb8420b055f5589a16de30ff71fe413a32bff32a2f4fd4d103a1d382974dc6e390dd6cf914cb75c09a16643dbf8d2878de29029beb9aec22a2c55e5efaa4af25415a", 0xe2}, {&(0x7f00000058c0)="3096d96c1f473f1a67c8c1a748dd6aebc43c7b0a084da1afdc4df40786d1c041396273ae7f6d663dc713dc81c1175a138c84d51da4214ce221a7b0a3b159", 0x3e}], 0x3, &(0x7f0000005940)=[{0x90, 0x108, 0x2, "f1812d95c4cc99b12d77f7e72c7df43a223562e783daceb759f2d4f364842d6127918ce15e5c34ede1c044c9b90d3a6feea8fc09f7dd9c55bfcf17ed6d6a14e5f429fb2299621109668ed25d2ce2a3ceb7f55b4a6ca6377d72f8fbd6e80d1b7cf951caf361b38c2449d1ca77e0081df6b1cb05e1cb09c12bd22c"}, {0x1010, 0x19e, 0x0, "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"}, {0x48, 0x107, 0x2, "84c37122231319fce66536a693cd0ce59ce2b3bf86b40423e083bf084e20eed14f599d256b1e188665471099e6b47afd24"}, {0x88, 0x119, 0x9, "e84e2a96c285c8bfb31703ecfee12784f88d057d9f4ac8d42a1a6d6bf18e69e56e5de074f509030e16b8bb63198bc6f7c2a37867bbd2dd11752d895a0a107e1b11dc5cbe7e661d04f16cdab64c3bf96b779afa876e3158eafa705906908be56ec2bc607b9b9f39558327f252bf777e997d71d899"}, {0xa0, 0x1, 0x9, "5f15a4dd44bce8a349f9899647d1ca65bf04c9cb9e7b8041d263b3028ff25d7bb022601aae938931c52a3711d4524245f316984e592b5fab30cef78a19551fa75ce16bc290739c13db5fb660ddd476e720f268ddf9d8603f606022373a85590af840e927d1cc89d714a2836829428e43d0405530bb92fc5fb7e87565e75dd39dcc01e37783396aec49"}, {0xa0, 0x107, 0xfff, "5cdc0b5b4642b67c69cd4b1fae74f5d0a0f2c3375e9817f740be9e5d67b47795dab109d1684ea0d4c1ff92040a930323ee7923ae118b49e4a49973aec5c8e194552cdfad4991f012c886fee72d6a17c7bbefc3f2b062ddb2aa6d70d39c2da3f72d600b01b39341af54fef5f66ae82679285e8ace0c35923fe08ce76ee3f2f88dc4c6d24bd511c9af012bebd701"}, {0xf8, 0x10f, 0xf3, "c38bad1ce81e357d0ee80271c7395f944aa70eef8eae0c5043b4c2aba80daaf849cd9f19aaeab8cf0b376b8e05bf068d7e02e12c949b889ebd7edc78d4644878ab220fe19505ca1e5ffab0d6dad1412d6d5ee44715e1b56c17260ddb74eebaeb073c876717a03b5ef267b8f196763930da7b40b73e771abee1a07d7d6956d0784f3282c6414101b53dd576f7e44c1c1a20415e65b5d56666290aa6f6d36db85b2646a39ef1487d2012224a60cd4eff896938e79713f37857dbf49f616195dc10a9ad83e0bb6f956605b7981dcacf49a438d65541f90d17ec366419186c4ea4c9e0c5edb90d"}, {0x58, 0x114, 0xffffffff, "ec80fc3c24564f9c4c87a5296848cfd9bbf96271a9f96fd9499ad01c473d8699b98c1f0cc9418c616748b5f7b0f10adea5319281a8e344f7eea7a1725530f5254c"}], 0x1400}}, {{&(0x7f0000006d40)=@caif=@rfm={0x25, 0x8000, "907a6457a6f45b4570fb4499544f2525"}, 0x80, &(0x7f000000b180)=[{&(0x7f0000006dc0)="7360757d956f0c141748f505658d44da92641df329a814d871cdc76f52734baf18fa6ea99538507bfe41019fb5a4db298248736bed130d8a8c5277fa5f0e8fab5df082b396706762c6e1f31c5bbbca8cf8f34786167582e70c5c01c0e9c2eb65a85e3534c9a1505462363be218ddfeaa5cc85cf7d58c0f87293d163035c20f0842963d0ab88ee7c9f608cc67b8410fa35ce5cf80bc304f0757a94d288e1f6386bc9fd0cc6053a5e3ecd82d682d54b406fa2352c066630776691c18aaac8c6566d244452713d077fadb1efbd0c8490e8a1403332ab2da8fa640c5bd269c1d86bd7aef8cd53c85b36d74be2b42bfd54ebcbccb4058aa2f2b2667b4fa43834b4a1a31a2782d8e31c1a73c5297ec2147446d2b8250042ba2bf50c8daf39e120f858da8327ec7dee277200fdd5bcc2e5800cab1f92703441dd60ef9dbb9d504fd1d874c92290971b8326d853c2852cba13bfc09423898954bdd7f89d4bc670b16a6d1c8805b5f2652d3744fc54e973722f2c5e1e91673abe46031f5dfb4a538e8564edcdf8f9e39d7414d5ca034fa7d51dc3049a1fcf3df1ff511d39dfea0d4719c36eaff83c0c939516229a2091a768da8cdbea437e4bfd8ab80d78c3a8ffd0a655db47e040e2ffcc90d2e0139e37af5309e3d28863f342abdae5ff536681f6d12ee4f01bc408c400f8ae2dd09f8e5896777c97e6e4b24f391de514afb6c2e3fd18ae0121adca431d5548eb083d3fe7cadbbc42b1252772802deef7ad930a6ae6651376d0eb16b7357b701bae4d24343a207368b7675b68584ea763fd38119bf29f408b8a31f375a26b69edb6b343a5ba412e39102254d0a0c8192aa241002ef25af5d7fbfce07a15ff4c77ed922f54ff13936e67385073b2a45411634a00a83d10bc05093abacfb605f73f67f69491312d997504b7db14762ce9fd49b94090dfc3a21cc5592634781bcf2c6ba5a5b9ffd942a32859a354b215dbe2b62f3dd61f3512bf4d800850f2d0eb6136e526dfcb4c1261076d99a3f83f34a44326ea68afe72347b323fce1cf4b4b62b5defa92f116ed31f827971db4867342f05981749102417994acf9ec9d67eb77fb228c1e245ccae33d38140aca83e71a75b305f64e280000a522523ee23defceb4aa179b4397b556a97c18cfb1a987dbee080efc9011df7c261b3fb6af3f8a8a1829256677be5bf48104e4f63818e6a991eee7f8476d6b45bbf91570fb249d429974657475d5131ad83eb70c6f228cebb1ceb327bdd996bb4ae51677e5b39239de263f90b4d8304e854d7c9820a593a2dcc8467679b5e6bc059bc35e3b4e70bc82667354509067d5965eade41c60b90ae2ec5700271c6158591acec09c070230cc29916d027d43b426784e5e64123ed6ab8a63ac44a91a0b6aeafb1dc8de0947f3eafc082ba4814306e115ec32dc752b4cc32604665fc6e57df4cb2c23e72093e497b25c016cfc84e7e0aa74a4aae0af10fb0322640fa4ab341037d0ab9d640aa8ad5268f021fa887498750e19c82d332536a0f8ca2897d11ab24029c85fc7687b6c60a5740ca9c660d86a68d484442a30eb0d227f25cf8d925b48024b80f3eee6c1c6a2d403a01c6ae36ba59eda2c3ad5a3df4be9894be3f5fee5fc87ef4e2b38d5f2ed4831325e22a64d7eb68d279f71efb2222ff563ba8078b32f038a934a66107df0b797ef06ee6a7c74165469230d929565bf467853d286c8c3d358d8969d12415613ba7ac890a98e7164e018758accd1ce8dbe825ceed14804545b4196dd401ba4c9de1e1eb3360f613aa2cb52f1448bdbdbddb1469c3d258e07f1f8e0c0f27d15edb902ef3f11498d420fc9d6b3127dd191242c3a14f041ad45800c178447cace6e8660ac08ddb4301fe041a7219315f2402379adac617a3449552ae3021fd9920fb76a8ff8b1cff4a03ba2c7b1fce0f1a7b5764e635ac4f7c0b00c4f5cbcf9217f3a18fcb5a6661286329b69a1fcc814dae414554ebd124dd38ea8d0e4fd3f12d39edfe5601ece97961fbb2c3347d292ff27ad6869526cecae31173fb8974639e08be9f4cf656eeb37ea3425295e18b56e22edaafff3eb67a8a3a702a763070b4ac2614092898337e660448a654039ff2fba75c5adb72174350729f69bba6d86a6bdfd079a6b7968a9f80e2e6f13b6955ab08a23aa86844aafbb6f5dc974a8ec6c43a357953a1131eeb10cebcd2802a4224f015bfa0de1d584443095f0547f704ee4d842b2535ea5bf7466b791f7f40f777891cb9703eb7d0e292845922dab3196c176808ec24dbd00be7077a628243fe1c69ce874c3ddf3ebc0cf876f7448e26ea44a5e2f1ddf79a2b16f2d3a6fef5d3123e54d0cfd8711bffa4d3416f465c836c56c88edb3cb2c1600b1ce1785e6094b6b7ffaa7a03896f76d78269893ed469fa8ee0e40c3bb3170f26b481ab5b9b55fb0198c401767ba6c3bd92af6f000fcc91e4f588e6b997a41c4ee7ca676bef08496b6674f78761b17348b8d60683d72206208987bfb25d7f16c969bd65dec8d8c0a787d805d8a7cf33d32643edd147e3d39b7689e270aaaaf18ee6ce05eea5822e4a775de6dfdf49ac75799fe1e7e265e9d179205788f46c5acb9bb62d2230d2ec131b723fa57a301011b43f7bd9ccddd959745019665262fd97c298a2df9770f581802bda45055bf09af417a233e01f8f4b5dc09ce412ff3b5978299dd45da068ade6f5e70bb24f9aec8e375053e4dd391cfee1ac12d96f1f1916ec72cf6b5fbb06318ea67e8048140f3c3edf117f5c0b5fb78ac67a4e8c29a352a137995950c15e7516915cb8be18d31b80503e738ff68acdf32b629edfcf7a58b17bf04dbd0ed638e15a0b97cf8eaa5c369e599929f648c16761e101c2ad250bec532fb3ca9ddca61ead8e7c419089c5f332c87dd1965ff47d2ff48c26737526bc2579272911ae4b76c799ea35e461b85dff75a252a843539ff6195e454ef51bcea280d9dd0c462c54926fcc44dff935575c058c9bb1bd8dc229d62f1ab0f2f8a57ae52f77e67b941db85d114e18f27359e230a65bab2afbd4cdee64f16bbf57c697cc76050fa40afe9eba3c564344b97d7194d94ceeedd80b2ad167a9960666aeb6904a5c6656d66e2064e2bb02a47339c726e9d776230f1db3824f8b301b8a9ec122109cc6d9e603c8a6b80b9821194ae6c6bf4395674166f388f6e3d50ba7c27e461185cd4b5b9ccb9c7d9d83a3bcc7f8d874b913d665141d0dccf8dbab8bd495feee50e0f5f23c6bea5178992f8f952a2799ad587ec0b35960a68c67450b704fce1d78d22f24f5f4aa9b50e4052496bc3446b90d063631305f3d0783cb2b20c9ef7eebbd0fb74b2757cbd18d06cb22517aa3dffe96cdec07f0eee20e48b79a3525dd4c433995929bd1a662eed736e677c2c803125d05768d620703dcffc1784788b2d4a52288e2b4ac371066e45e38ae793260d789c5628692269622dffbe69fa166c55f095f18b0a50278bb4a45e288826e23b6dba6efd572c6df53c43d15195e97de59f64fea63b9de3f2524322cd2a1429fe7239983e7daa6f365114bb71e446728f17b5c2872a5d791d06442f71563244ba2cc2c07aea40c9db79a902f9763372fc045650c939d55e00817ea6be5145bf9af977fb9b7b9767a1becd1c72e84785a0ccd94520f111fbf6083c55cafc25e14029f22505793896bca3cb7a08609f1548f46e7913cc82fccb1df02c979631874347f76182d281978f799f21e51054440bca4b47a7a83317f6bd33cea62b2f674ac37b7c48628f719d814935b5f9febd9b15ed4cc0f7797ec64955dc0eeeada5b18f9c27efb13f1850682b301b887573fa604dd58d152d70690573657ec2b3d1883eccc89eee0bfb36ab4f0c0c7b7f9559f4af95f4de7c0dfd2c61d1f45bfba420955cb1cd8c7aa49fe7debc9f948a75144f221373d2331e9381e8ebd4cf7905515c98686fad94f6e973612f8885fc08ba2793b4c6c90600e412ad35755803bae52d063198fe22985fc92b6ab8df6b121d3969b485f6fc40f9c3536b78eedc80dc24e3488da05f5f4ca074644a2c1482c5f5e3bedecd5310d0e8704b078fac3052bf55a049e09c00a783db498c867b3f96926bce1037ea1b2a7872e1d46eab39dbf7d580ddb211099c577448bb8802ac9a4d02cab6f2178dc1ffdaa5090a558f8e0e88f042b4d7f1bb890b526af6cd6976acf44e9d5c6e57f8bd2a4047c5c6755d574f0e448c034e64e47f26c7dca788052187f675a9443ad8aa19a67828fbb0cb2a4c086c255ea9ddf933f65a7f894606491377fc90fd8112e5db599432ba87edb0954a8ca64ba53c934052d5eb3bdf05f75e2372bfc510bb8dc199b7af6837667496911bf3370b3d27e40ecb6ec5f95a5a2bac6d36d224faa2ebe894dd09598456c19822205632920e8ec54fcf515b9881f76a62eb296c5580dff5ba8c70cebf88c66e992f972e8a79eb69b13b029834a9001eda2f4e9c82163a899ad23616391e9df739b79f9bc9f784f5ca1bf45c06a54cf671ffbe0701d8bd3f34e16942d69c620843ff98c4318d79d315981fae83fc879cccc5a1930faba5a2f89c8e00a17e1e87112ee3fdd187ef0f50ac19d23fa89ee6b687a40a0b98a31541f743f24b809dd058f52ae1cc11efdfa076d696c6a8671cffe5a414e323c542e4f8254ac5927103392ba95df93e15f6e219a6b4f83b96126faa26a4aab008bf1599bcb40dc2bfed018ebb0bcbfa89de052744c22c060a8b6f88013437af09e85ac702f68ea70bf938d7db621cc95f8b7d2f522d98a67a456a653ef9c48afa5394c8c4a2a830fa5717f7e202efc6b0587bb6852ae6534d9d27af307b4137af60b1b4e5e7c54adaa90d0cb7ae65bd80e36905e4434f92c313fe35f8996f2d530dd4a69cc070e9fdca96d14efab7863cf75b49742f48ca5b40d5970069bca1c87162b1c8625dd99cd18d58d65926eae5323963dc14a31d3c3ebf0b3a1e664469b37e0bd5e5ca05297ca8c79140517fe15ead54a3de3f5e5b54c27082ecd196c6e8d9f60664954f98b9c1c7d75f9dfe863049a2619bf7c9e10e5fa773921b137e6dcca88f040c3739daae62f88b9929d6d09bcd21c1d585b9259655b983a5e5a101f700e80fec780e76b0ce21df2d7ba56467e41d094fa21ef88a3668ee57f812f3ce37a73fde3df0f6fba61a7b9d04ddc03ec097ca99f6547d16ed189d80a1506807e3edebaf8ce469805eba6da335467acf87ae3031f0e737dfdf31a241419615c0625f68aa113ae54454789aa7edf292cd25f23552684450b5b04da48b877bf773dc1823b80f28e4706cc59ad3a80b79bc655a0d1b6df876f0cbf5687f517480046f7a0523310465e65e970405fb3a33df6257dc9b170bab7c56de93290eaf264016978a6a9166af445b44b46a5b69dc80e9a48a512cec658f736ae6fb43917eccc7b3031a0651023d43954529fa22df19e68aceacab2de062427cf4243c4f28c7dfbf7d527356122ab13785a595b54178dd97beb85384fe5c54e31502f2be8a6c8d2ee2abb0a558242384521c7dff050d74fcaf7b64505091225ac52b95c3f369fb84a59d49e355fbd1e8e4981a7f659f5ca609e1aa1843e19182e21cbd1da141c28e3ce74dea201fbb415e6ba0dd1335128ff81f1466a55a735e3d159231876b91d8aa664ccf6c5897c32d7b4beff7ae08f70e87059c4093a0e806d28308cd2ea25d2f47e606f583b86a5b15f044ed85e8b2c9a7e655029bdef7f62159091eda7c32d8c688e1927ccb51861966060a6fb435d044b5e", 0x1000}, {&(0x7f0000007dc0)="4b5015632ccdc9e495bf263fdfe69be65dc81d1e085dad298dc56104635100d67620b9993bd90daefcc54d3d617c6b7f382ce74059afc7d7bbdeecbadc82892adae191c6c7e8f477f423cfe511d56c633a481038922f83cce2926bc9cbf04ff97c59f659", 0x64}, {&(0x7f0000007e40)="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", 0x1000}, {&(0x7f0000008e40)}, {&(0x7f0000008e80)="edddb519c7b463a4cd22f5333a6fc5ca2bae0b0a51bb6682d12ad3eb4c696cbb06745ccf95e8112686c7a369e37d85990c34095d145ca850cbcd9601dc7a33db8b557e7848c1dc96a968cc6b0f09ef3aac1c8941e8c836ae4fec63c7e22dcc40b0a209464ccb008cd40a7470329b37101a4b8ef74db5b359c84e2d0b", 0x7c}, {&(0x7f0000008f00)="c93a3a61b20bbb88171bac1df3999a5c8181a39bbb1b931aa7695ee701b88d8490c1c67e1bfba9b2a93727bdc82fa6301c7ab179762e733facab6961a0c8cad6b3a91f8d5710b886486384259c7f3f2112f3b0643e011f31be8ccffbce6251e5fcebf50e81b11cfae9938a183edc3be6130e57ec079ddff86340d18377ec01ed137373f8d23c95a3efdc69d99429aa9b34cf6bce044b7e5a71f7ce36eba68a4c6f40306c8ed5a049a18cf777db2d3aea05fd3c5941625579337a7457a54a7413309d8c46790c63e492cc5af6d377053d75086d1b071e802c40a25caa4ac0ff13efbe442e3c057b3c9d4c3f1bb6668bcbeb3091a516d69fd1e567a6500bf2c56abbf7fd15ece7dcc61187200b0c2d2432a91a72aa84adda7e9593d5faef6d25404b87a49826de8c676fba04644307567870d8a873b5e3517a7575b52640fda6314c693f59060e13166533930cc5a66e28b66f2c016bcc82e48ae3f4ef31536f1f238abede772120faf9911a43640fc9ec84b0643c2f434d6cac9862f59553beb3ee50ef41170714397eef08e06d248bb20825da2f267853b8b9999bb23cabd49f5b990f7cada1f1482404e7420f2e1f2c74072028cb04b7b4b0826c2a6d7444c13b748905dcc54f37ab4f3616cf58bdf937cda3c3d84df0a27688510729e383812a52be86e3bb8125fa639790e4b985ca3f9eca4e7ff86cfe0dc71f2b681fd347d15f8d613affe8c557ac0b103389785f77f0005a2a488f2d91df1d21e7876000befe98ebf246897028fd5f4009f95d60ec6811e681ef153bb65b1ecc4670d4962813e2efc080e4de4e80ea2659db34b64c97f737a6bbc16cdfb4619fef31013863f0d0df0c265599ff3700e788ccb0f1a1c72679f90b3cc76358791bfcf19359ad4b2e8038d9f5f7a4d3562b243b84da2da0ca66708b46c0e4e750a8a838fa3f5b28b2313fdefe9b1c3dbe38327ccce7930cfe4d7dcdd2b0d4f3ffb6a561131b186a16a1dae8fea1473a9baa06a85a57cf936090a2bcbeb3777cd3ad03d146d06caac675006ef0e07fe062e631d37eb8519621c3d16116f31cc89982366f06f50a700b582420420d8b053ffb58a209d8440eb9cec390781b40cc04b05aa89ca8fc03367a668e2d22faebd5f099ecc4d5082b19a0097373c91285a8a901090d4c1f30964eecfd2cb287f577d433d13bbfc7b9b8f8c55f51c945f5d0f6181f45efae49ade31e8381d2f3ffbf6ecc1464aa52d69a548ce6a5ea2cd531ef55ae0cfb78455f4c588672ab8168bcbc235269043256bee36389536b6d59fa9628cb6dd1436df9d17483a2acf478f3164f1760b0ae88291dfec1c2887f112df08ba29cef7151ea766f9dc7cb41ee3763c56f4d98cc7da645e52755ab3aaa3030fec45c49a8bfd57898b6f53ca37f5d40d18f844ef647daeced5327a9791a939f910573d9526012ce64c3a93af7030ba9b0559c7afd2a99d75ddbd4f290f82fac6f9c64454dce13959413c7236b76e3d30817a1d3769fc70fc75730a3aa4cf3fed31c6eef28c7b2fd5c8a986d2daa158d6386d34cebe97e164658fb3a79a720dff406180d1f541bf3f7ad25a9755105047f907ebce0afa4d72caeb013b11121a6f52c1422a9ebc18d9a1557cee78b163be9b20ef9648a2be13c6dc12907a035032cf8e9911714457e634767a1ec577f54715c82ba683ba5a08c35f081605617e3485050c4a17f673544535ac2c07ff8b5bd3b933db698cbe481ab642b24bb0a335459c8fbe3fafdde1fdb1ff97f90d5546c839f8ae972254504de77da24f4280578cccedf77a97819caebef43e73853c51b5eec06e550ae8f9b36747d2ef6bab10ac471b4e513cc73bf5c7d1c2d2ba33654caf433d9ae5eb65153c63fa03f23e7a44fe80e7e3c14c77db738af840d3225d251d5bf854a8a835f727db436c62d4cfc697bddbdf642a3368966873fb9a27982fedf5d1bd923de8370c9667679015fad1b397ac016290a6659d0aaff8701ba93ba021d4dc28bca000ddf6a5390341744f6ff2e29fad818de6920491e7f7468d568b8b14bcf0d0adeb511ad96bd4d9873b74c3003151ec3230e07e4811fc4e3f7acfba29a3bd3f31cea3d8797f16f4e64ca370c8316e5236af457e694e1772d86bd5dfb51a2de616872468c537926fd1fd954e3f7e34499c8a68a6c52180a771dd97c7d67a0c676db8c746e541529de67b84d5e58d0c61d2c6302b66c66598020585c3d328b59b19b1507b7c65d5ca2fbb1149cf3ae27f66d479069bffd80f576289ede555828021aa461b2ca17acc42a452b27209719ee4708ad75b84270dea199e4780756cd9f7f0b7bf77f6f651115e6442c2b2f6eb8f24b9435dd5a4d0a774fefaf1a8726f06297fd7bf6f385d5d701a92ae4ffc0e754997b0c14691d979d1742eb18a8111e71daa399f03f5e696fee76d70666c305b8045f86fe9bc2cd29f2742cdfa7ed4a71d322b9f5a3c6b9100ccea48d5bc96e0973b82512ad2d580173c39b96aff821912c1d5f86c9e5a425704f7410962041a9d01433e4d3ce9859a193bd1e9c83d1ceb928ebc269fb52c86d9d1dfccfd50bc9364f34ee4dcae61afbf504f623b448c9918f2771769aaed9e95340382f6a788cba0f86479bb2c8259b3bfd0f18f32bd5e421b45ee703f9c145081587cd72f3ed0ae849ea1eddc822174c1178ce27b425bc86db6b72f37ba2134dc98bd3ca8dfbfc28a82322a6badc091a1ddb8ae5c00bb88a34740041f2595f5d6eec2f4fa3a89a47818829185827adc12f746e831f59d24eb1d342b51a0119f500e15a4b48a8d762e35392b8e1674f4c91b029454776816bd50000fb6fe8636d344309b254a4417d2140f75e5a7412291c671826c97ce9dd0cb547c5714e01a1ec966ec7d78ab1753cdefb32ba0ddd229b441da1fff7ba7daaf0316c4150a6d297d33d60a6e0d59da90a864df3ffc3103859d0c2f2f507bde6265d9c2fb05107781bdb471f3c21782308e8a4206c37e4a4e21691d3ead34662ff6e98d2a27a7e33e153b1bcd2605074cc685f21d33ec270b54e444e8062783d5e13fc44807076a4e13fec54182872f342c5f214d3ff517f55e58565a203b4ee067fc4a16bf0a60dcb028152079c224a32f5f6b71bf73eb2c715316a48094c119834ee439e52d5e2c78d5dcb27074706f3442057b3e691fc57affacb5423cfe153b8a4cec7ab7b78c11fe237920ab7482f4d0a72bed81387bc69f914eba1bc7415c6cc355b1e3c0e1b27007b63f7f5f275d3df628991ecb995a78d38b12e4b667c3d64a2a983b528010822590456417c46b2fe9634c4d3b23fc087d279028f924cd0405d00ce679d94233ecb66ae2dd09453b69da273ec9e2714fdd84b5a80ffedee8dca91bbacf43a03583aa3ff062a36ce07f27435379cd064247f75fa4b13dec8bb278e715cbe408b5a0e85cf97678b29fa164076756cc89687b6e6a750e369dc73ccfd273f89afc05d121fb189fc8ab848ea3da7eeb525bf2d57372950803136eeb7fc240dc68039081f743153372f75fc115aea644db1ee428387aee3b379e7bfc26a01b01dd0213cf6c77cccf304fa7281d8e2c85603a7e0edf01d3f2c48704064d21c46ffb60c0da2ae3223459e2d1ef4e31d4db17d9f465a4db1a9c9342bede07c7e92ce14e1ef351013129ef9351fccf1f6156652474f98db6f2c417c4222e7f9a1f916bbf1152c14f724cf8aab2ab46f2aeaceb6baecbbb443bae21759c5059e4360820ceeeb8889c1965ffb1fa99aa7b356f112db0250f521a9f75ca210579846cd0ad9300a045512a456992bbcbbea9fa9b68f027d4f1543b5bec42758aa6747ee91480fb5c4d75eca58cc0efcdf04e2cb219f419348e56514896a228aea64bbdacf09d67cffb8889d1de99157c1f5be95c215c5888881ed6eb14a2cba7d81d18f468c9d435bacf9a225796cfb93c2bb8105025686dff97c6ad272c99bde727eef945985fae889136771213e285b5c10ce0d14e87656acfb44bb798c71bc46b800143fdb6a6e6195b89d0d5583a1c70d7be97d0fac4359dff565569e03e6776d6ed686347ee2a392b75c8f87b5e0c00c28b580b50600cdd16c399557e086d2ac3806f6b63550b3aa3630b6f6bc4f968afdf62a99279db6d527139c5fc1521d5ddb58f9353506a6369df0a95b38441c6bf90ccb61038407e4a5f127d988bd89523c3dd9cecee3fd43134a127bc4fb1e54e516a545e8011e575eb74659d88e9bb0d70624f87b3747ec904a577215ff209c58aa342d56f1fa049b7be6a5b8e632527dd54e6fd30d571955fadb4443faf3f73d58dc14532902fcdc0c01ec39f9ba014531c66068a6908378f48bbab4d9856034155486dc3111da9499a70ff6248069d74f471d07eb87ff327431769dcca7ab05b103825ff11d44493185cd17eda2772b4c0aba0674bf25d2fa5fc91fdcc940c4717d66216fffe2be00cdd0eb87fc060cdfc28d57b432f0160a67b44bc3a4205eb6a53c1183015d746b5ba4d738cd285812d719cf37b1c8732148bb2cb34832c32d9f49ce1076d3781a32cb4331e51582b4fee08d177c2bb32f9c528ef8e77321f3f7c6898327b8252ba3d780633f7ed7f20590cd71c2b5b759d7eff38041f1a2e9e227487158f1e3ecec67caae45eda632db3e32ab049e5a35a6a360a285dc080cd7ccbfe9500dd7192134efab42e288856792d82b88cd55a91afecc3ddc8623e5725aa84e0ba50de31716a518945f303eecd08695baaff87d2bffd1ece3152bec15cfa589d9f6b17ca0ecf31f9d36f1924f47dd0bebbf69c29e8160daa9237d2ea2919900f02af845c3fba7925bb8d51df7784eab826754df3ff52b4798cb1420c838e304b077ac9097d870927ca4359d9210aa7219b9fb81c0de459f464912d622835d2816a62ecabf4ca2a420b70949621e2b71a22d2f07a1e7ac033e0ecb026a04e15be8e86549867dd861a4207917aa2d163d2e5ee8dc21602617ee3c74018c2c2d8447eac854b9994211dd1d4a9c1f172eefa7f6e18d4825abe6193efa7194dec33a8faa8f810f2f60e9f5c219e1daa6afbd2c6457ea95e62f0dff28f82dcb5093f682e6859c02f28c67eeb38d48ddee91f03a9cef64562c15c5b4ec0a646c42c28099562adf23e3e5043e61ea7a5be9ddfda22ef08cc1e3e7e716da8fcda7a370e008c8cb6aafd77a1bdcef54448f0b372a83691f830077d42cf390ce2aa3d3aa5f861601fcef351aabb16f1b5b3dcf246b03e2ebde0634a4183d82563820f102c7b662eb804fd8cce81672951d9028f81d4ee9a08d93df286be5e42987b0848d2b54612efcd78d6fa8094aee8d90c2b9144cfff3ccfdd1407d8102d61f53bbb0189aa2c94480f999f440474f4c1a5b63de4dba0b1010e54c8b43a14be9e5ed28a4c21f1014588b5791fc9cf3f85221f6406543da2bd39d27475d16b611a7642ad775528ffbc215496e8cd61afdbe99c255ab3a3f5c8cf672ce59919d6f70265feae11e89dccc20da5bb35b1fe5a39eedc71ef48bd18283866ae0476ec2461bd32e0a7a4811c0b18f2ac99e60f7607fcef8ae5d71e5687c1556a2ffd4c79e385943cf904c379aa590698c23cebafa2a69640e7f942cfbc122fec0dd5b302be358fe61b45f8bcafa53414e2e14a57ffefded8620258a01b0b2760c94a038ae2a28e948462f64893b718324ba0220fffe2f0f93a8416df103d507741e6bb6c673c6698bf88f8aa46e64bd22b6a0692ffe2ecad195248a23c698df3d521d71cf78847a857b84ca5cb2896d424debad", 0x1000}, {&(0x7f0000009f00)="cbd2f127b2fc058e959fc89e5efd337dde29cb8d60a9acffcb68d62d603fbea158365e2fb15ce92d37ab00d7a72aec1d093f748ef9f6ce0750eca42dbc879e1506e0c3abd1017807f49aadcdb3c467d87d71ae759b01e36d7b2dfa284969f6", 0x5f}, {&(0x7f0000009f80)="6265ddf8efbe8e52c1cc2c47f37651de33f973d8f5e4040a2f48b1b5302893e0bff5a264b06b455696883afcbdaa02ba395eb710e1c5615fab57b71a09e0fb2c5141216fb2e1691cdefcbb48f0de05b5528bd5627bcc8e6561d82f43e654ab5267ca2fdc5e686514f3e4a5f4a95eb62595a531a30caf86769079a986ebdfca4c76d695bf4886a13f78efc05a31c5e42dbd157362f0aeaf51d36fae99c895d264260918aa851e6f526bd49b31943db32c00edfe3f6cae98df8e562e20b647c9de1c978a32e92a81ce3ff6811cefd63cfaffa2afabf5dd6d7efa4df2028ecb6ac34a849ede425a4bf1378d13aaaf43d725f0d8045c580904918ea620d5baa73ec04cda4939282aca92e30bd0ae93cd4d52225e27f3415e4a656dbf8bc50949228b1e9085694ac33e95a79fb8d7141a0ab2699cc1c33e0b1ea1757c2cd8ea85c9f6460be13b964ba6a8ce6e9dd3ed37ea76756302d2ffdcaa087cd55c3b16e88c632737f45277d26e8e392876679c2a243c9f9e64d56dc7f588e2addfcf5d0d6c36b9c2a0f3c50a7063d2c1a58cdfe9407fab02a190128ad5d0541e6fbe571e4c05524717231466ba43f20b1ed8c2b1dd18938b92531b094329548cd39961a4d05c6e6edf02157322b64b441da2e720d3c26da73cf996a74c376ea8257f4ab9a8d11f89c57644d41bc09c6c1d6a870951e64815e05168b09c98dce59524097a15c94ca3d509eaeea9cc2feca3535299d1094dac83f638f493a1c0434a8e4feb03ac81d4ba102079094b3d14ea77e312899619178654719bb0e2c3642657ed1aface5d3a9e39ca33a6cb6e284193b167f7786ce20cc5a81279a0d118d793abedca4ddc535bf1918d2e6cd5a91c50b167c7c05c9b10e9367cdd9ed6ebdda790300ae43142021440b31d8b111caa9d7a60c8a69571d381b8276a1bba8adbae6cdb1691c0cc7253727ca6b3cc10665f9d5dd49f9028a993efa3cc1b1c224f052d6d0445e3c367f1bc801d370efa807cf718c966019f12ebb19beab230f4ca0881b16c49990366857f38e6c5272f0256452fe665e792ecb524f326ef304a05e500596d77ef60bf6570d702086c77172a61bca616b74be241b883ce37235e0d5a9b1c77eea1d8df6d20b9c2d29741603a658ce6034e317fafee8ef80498301778434ed6d41ab8f6c9aebc8ce870d60ed59ac440eba76297f643cfc434728efefc3bf0274352b61b34ef73a45caca2c66a61f93fecab03469c50dbf39c2c606f269ad3f2e650e2045bad7411853d8fc3f1c19be27380f30541205e5492083df5942243560fb176ac69cd5fcf3889575dc8e657518bf4c29f712f1d852388294b7d482ac0fbd7847b21655e310644938aeb2f51aaa3e44898d5b8b109ffe5eecadd8a644e8329a192d8f521ffbd74d680aaf2c230184c3a93790f55083ae396ee5a75923439adfeb6001cdf3718fb4e22c796dd72010282b4db6fb40156943f1179ce32181585964ef8b5da39197c4001f47b6edee595ddd276146df1317abcc1aaf40d5e058d14a7c3830a4e9470b69a9e8194341ee9fb095f794b5469ce05fa1750b08e8d8e7c6c81e5ed9cf42116e251960cfa75f0d6ac5329831464a0f630165565a5c1c165146716592730b016d8523823690cfed63775f65d57d4e964e6b00bbc6940ae1e2dd075c62ac3bb4ad1a7fb1abbc3f1be3b557b46ffa05061eb09b5b0a52edf50b430ff5e895acca57afce410ea1d96e76eb19d43fc07f1213a1a1c3935dce5e75cd888d53d1b1c8f8c443d530be3f5fc234bff603db9484f84ed850853f1e5be8e05f5b509d54a4af68cb74a31c5625792a6a3e9fb533b4a5350359a2255c46a73705c8ceb105015bc0991989919b49782ff93a08d6a0d474983a6e7b877e8fb6252aefb3318617d1307d9db72459879caccb7aafa7edf769b9af7ef0c247fa9617a367b54c0e1e5305cd4f7c645d871be2405b324bf532e707e6d0dfa9c4ecf43cd0deb55aca5003196a23b68f4f2401403f50f5dc060c78e1ba00ff784c5f49fe6318345c7abf73a81754ca710a34515719f3afb9c51b9460c98235d0e790cf22bc81fa3ab4216cb4c02f59d503126ed040cf2fab5bb3bcb14d0d7f63a009b421b26afc83a97b512fbb5ffadb6cfeb297d36dc6845581123af889463bc5aa165f1aace98c711a6176a45d79448b38430be237bd991ff96c73eb678450949dd78f705d5ef3fe6c53683a1e03e069d5c3f2c22658bd0ff1af3476de01cc2bb476f7821925d01408ef13b45d70004b27c7571a7b73517af4fd7889a0e1520444e7ae7aceec3f5cd023e32786af10fa73484d02f38d1e900f25ffe8fec0c4bdc266973ff3ecca1005423eced4cf290792046583bfe1dcf6967ab25a30041f6089a04980d44a4ce76fb6610afd52ee17fce53183186ec13cda50f8a3103d9368d0fc7fa5e3c2e1cb3340adc1992994de425601caedd8443a2732c21b1a8b65eb5458d035e3423abcc938e04373ae4f511371138797e83b19e7d651eb71f405bd4fdbb9e44609f23902ab91fc94458557b96f6e138aa6fe928fcafcd1bea05739868b42f1cacd5a5377a93ac4fa095dcf0b78f163b02dde16120e052bcd7bc23eefa34c8015f81a8608c5e319a78c411bfde926ed85f4ca651c47b764499c8e5c341826b27b08d8061a5db8fd2ccd37777d6f51ed0a842fe3f215274cd9bc0b5791ba5e05c1a4921febcfbf1972906c0e35f26fd138da8d9e849d7cad3a5c4db8cdc72f5536e177e4d7d6f85011645d96fd367bb4207c2834412965e00bcf9ad8ae0498a948646cef9fd02e381f749b2a74b34ccad82fb814b24b278ea142ee71d28f36d0704892a44d409ce5c1a9ca99fca498312bcf484725bae2e132fbea9e9b11d43bbbf452ea9d8feda6a5f30e3a0e96e5bd83ffdf1ddd73751432653d1626ec2bf01db56b100f349b2c2b83a369a866cc022176290e1028e638446db957832d3b6c5033c7496731c96526a8d8b0f17786aa569a5d9b9843be7c5fe351fb325d03d3d71275e4c692fc14dd9e27b69f300a5e600428c1629e4910818d51d55f0cefaf3bfe829c476a4f4540ba25e11b947c746e8eb493cf10469d1b3ecc10852d74890718fe868da851da1d3aa7757014e1aad8985c6ce2505099316368a28eaba13aa05fd8f8683440fc8f1cba1e20fb178c3656f46c158fb92d08d4325d911bf330b7a24fbd66f109fc4dda4a80863802e6c25d4f391effaaccf9e10a444a36256c8b78a6b80d96c5e0441103d783dca4fc9a8d312d4b8622fde4395bdf368e4cc97075cb026e8b350e4dc7437f7c28a719c851ff8252d14fa5a7917f07c2789cbf445c22e246f07c69d693bedcd8a6b4c3449b4dbf1fc92d4b592c56288cab5bccb458d350473a3042b1e53b0b5aa0608e7ac5a4f5afb364aab534c7be31d231d51bca67906a9d633329df5c5d5e40709fcd0a0494aa4c861cb102f905846824926c7904cd59a229fe296c5aba09ac1b0a8dc17e0ade351c9b669b96eb8d96c75ca3a09e76ba9b5d8d6678eae611d088abced043db0d9f712aa88a745bc88ef0d930d876d03bc4993bcd64e2684ff0fd3c0b3540c44ae39e44589b830847a59d49d83a321700174fbc215778078ab5fa55e8a3acf7e16376c1afeef9b1ec2c85ed51076cc10d79ce42727f53d092734924f9389a7d5d8609e6413c4915fea30927525af63cd2efc7115f622b6bac5ab9c87e9ca3589d29e1af55c12259eebcd260c79785eb3f0d7fc33e575664cf6268efbc9366a0c3bc4e72b7eefb51e786908e33e5d5b43a4aef903e689e70150de4534b44d887c950d5b790e336ef8a99acc0c394436bc663a1bcb599c3ea7d0b127b3cca14ad01082e89d17b579d070d8fe21cf3a6349dda59ea298e52262b87e52760dc71f11503bbdf1ab85e39f3018fb49a416c8b355cd4b1d4ce6b8ff044f36f67f56c35f07261b47a89756795c489f454f9cbce6c9cbdbb8f0001031d295065d23497146760a0812f99f9f6a32bf0aab5b1ac152c325ff5ee69fd1aacf3a8bc4445737250b6a6c726b4cce4fc95a3f0d738e6017e578257c09bbccf5e0199db749194152c7dbcb10259b665a1d1c735312554a0ef531a35b06998b62683b97cfdf8c4d171620b540c9a369ce30c3be96577a5d52c08ba8c39fb6e778a8e9058d03368388589f08721bd6060e8a1bd38bf7e271f8835cabc4b4fb00f863f6ce15c11436334f3af0ad90bb25095d8c7d6c4001a5bd7415ae06f0c76a23d779c0aa7c1f955f7f2850f2ef14c94086d6cf0e1d86cdc9e8836e5be7715ac8a63a14cbe9ed606c7cb6995c4ddd3fff814e76fe86cb2b5e81a708b10c5438f13a0cf07c5c304aa037938244715fb9e99e485f40660ab51bfb4fe06fa0a701bd72bc7bf8af98cb9a4ad5d088052b5c5a99dcce984bb25af46f9f2642c091d1ce5e9c1bf3617fd30e50c9beaf353940464eb4b6205b6b8942c7c39ee087a51312bac27afe8ee1d36145624ca14aa1b74d2ac610a745ac9c24b3fa48dc3607ac9002c3125120ff4f35b35ff0bb873116d1a83a5f2b3d6604b184cab4ff95d291ccba27a3bd562c6c44979d5207d7d999ecc68a02488e1fc7260a4c6ed623f6071b30eb8846a3ab0ee1815b412cf6a6e6e28de05dfe08d7633a0d792b377bd615191ecb0a845ba50363d743fc7c8e5569046272474d0f20aac7a79781f2f88c8410b0a80142a0d09b3ce06a441f678625a9c9382dc0b7c0792745d6351b2a93c27267f0be6d07861c0557b8408cf4834631d56d051f0f774b206796f31d6ebe2a61aad0d34dee0f11621a8be6cfda170b2d17fee26b901d669dda2c81afaf456b13dc5511d96acdb1004dcfd59780271045d1c56dd6184f34978745c032401c4b8788b68b55fe7dd1a88f206cb329055775eb42d085e0801634aed9dbf9775327f7eb45f2a9457fb9cc8d4fdbd99afc2dafe82e7bb512a03b61753af958a1633c02275d59e1d5db37de47bf8c38798cc538dfee82dfc100fece6c2a1ee1e3dd1e8fcc936e60358b5fbcd916eb460e82e5a035f1570166cd9d87bf8208b1788f4dcdfa318808624653f902984412ae1d95e29d2d154244468e0f518f7135e7d1aafd2289e3a9df4d20f94f96c8252ff3d3484837ffdcf3d5500489c51428fe4f4bed6cea38ef0c70e4c8d600f240faaebdacaf20cf59181a6e930a233df22413084539087a3e9bdabe9e315d70f30f692f0a5b3b9577e420e8ac4f2e3f753f81e582014cbe1d6ee4e97e6c57cdc65d9d76e564564fd60859714147b6622d45fbd3b51206353205b48f67fe6d881133b79a76aba2664d14cec1818f2b2f627fae0ee771632c0997e60281c4c2db43fa58b067c938059f8d7100ead98f9cc240261cc7fcf140a2df1036b12d5de5a612f9afc7c92cbfabc6393de3878d158018a04ea0c7d9afad2ed2113524118adf8b127c1457fc7a1628296c5e45706e6709b539c5cd2574b8ed52270f6a92bc68dbceb437dd7f87ec8043872e727bcd44fb440df21352bb5b81f73927478642a27d6754ae60b3384810b7378c5f58f3eacc7fbe6e54b0636f2ab4564ffe4e43a47949bcd27d67c832ff1402037567799a86d1db96fb1aa89dfe00253f6590ba34f886b3baf0076ccd94ba0451145f743c8488fe20b637a43ee619bc8ccc2d863d445028ebb4f471c54f6c526a93801d38569fca76cbbd7bd01ac5cf0e5064c3b08a8ff3dfaddf394559cc7d89c684f41c6045df391d548d031c5f1a8f0a4642c6c8979c", 0x1000}, {&(0x7f000000af80)="762123f545e58b09575dfa39f09a0cbcd5042a8005ca336267af7c454f37ce438ec14e6a34876f1e6a2b43c815a371b0de4ff25f08b41dd2a9e8f3ceee18b4500535b9eb21943a89739f45f95d81ca4bdfbc77e0ff60445ec2dbc7e1e542e36b5422281f7ef8aa4f37bb32cb344edfe8bc9a8e64b13924a36ba10862615b9b6af3a8b6b8c3a8de6f832a752346df5b6110a77f200e519a3e8ca88e5a1923cefaf69c724e05af0579b8b88444731fa529f7783d7982db5207a06feb4234ae418590bc5854adc6af0920aa514d", 0xcc}, {&(0x7f000000b080)="2e330ca00e0a83c804732ca185aa26b2603560f103721e3d8fda02316f12f52c6cfca829434aeae1944b52b9d62b43906d2b965d8ea062466d7488c19c4daf0e3ffe7bd6b25c4352141a8b1494af9c3c7309ead3ec0194f663c5e65d8b2dc19bfb4d25a850ebf9494a626484f32fdedb76506bc1f24ae243ba95e90e1096ea09f5f3e445ef9d4ef120308699f5c027ad8af7a6f6b5c386ed59dedb7c1681ad1c921883f53a54a30a342fc3cdaedf8b4b5affe5c4fbc2f6aa930b745741282f810f23e0faddc82e3b9ad85ef92a5a245ee34d91eb064e81cd678388ed9b4c2d768a567894ab754c35471c3620d8f2d3d2dd7208", 0xf3}], 0xa, &(0x7f000000b240)=[{0x108, 0x104, 0x7f, "bb71afa3ab15f2ad99f30d1f13c9bb603321a21180eb419ff9fd7c1ca5415bfd33611743d7aef7c4d289e42a02fd983991622e955f4956d1cfdab8f7e17b34ab11af1a1a6c90ccabb8d8ea8701a47f054ee7291df0c46f4c712bdf0b7b59b84424afa2fb52f9b9134f76516adba0d441a6f126dab27e3d67c2aa632d4d33697a6ccadb82552886805d80ab17a0b6801616d98bd42858497d2ac08a8fcde3838e2227fb7ff7e855095b21cb4d50f0aa5467ed2ac1c4c1745f728ce252513c29a9f244ccb0e0c8537bff43455adc7f8645dccc1b7202b8ae391d5856ac256f3ea0c571ea6792df8f434b6ad3de2f98cbac7e9712a41f"}, {0x80, 0x117, 0x9, "e1ae2a859ee6facf4f064bf3524dab743457811b981d23bd3aec7b75da63e05330f4acbf77ea2d5316a0eb9f37f8708166c6485067b04817fd04cf2cf411760ae509e767e9c5bc110f6639670cf103665de0ca76b176fc056e4d7a30d78ca55cf2ace5f4379beef6d506bddb"}, {0x1010, 0x10c, 0x7, "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"}, {0xa0, 0x10d, 0x1ff, "a5c8435cb50d6ed4cb1d369c3ab2401a24ca1553a6e7217334d4088fd2bee29058f00e333b071f52edd22a03ccae3a977517f58595bebd7c139b323113e63ca54d25a3513c09af164e82902e3e65ba5e09cd3e4c6c34779c6b201fe767abf331d165df1168b2eea6e90ae022ccc03ad1d2060a4d545691f67490c3d8bd63467263eaf5063ca777e68ab870ca542c"}], 0x1238}}, {{&(0x7f000000c480)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f000000d500)=[{&(0x7f000000c500)="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", 0x1000}], 0x1, &(0x7f000000d540)=[{0x50, 0x10f, 0x5, "e8f80feaba1f9cbd977466912b72f8b5280242cda39f572db9ec2ef2c2b2a361b5372c21f200d8fdd050e4dedfd607081f8a1de376688e60e0"}, {0x48, 0x10b, 0x9, "a7d8e4f91d200d037b6f092782b2c8396d00d9b6ab2dbe4b3ed1392d403731ea2296fda690e401c869f72b11f0f58203d67702d5db"}, {0xf8, 0x29, 0xffff6ed0, "16cc6f8d841ad037746e40587e87fd6d0bbf637451a8dc8e222219fd524d751d43bc4e98284ec3ab60439dc3e7bc6d8770ad9d4ea4cff7351f5901a03b9c3a586ec1d9bd286a7d24fdff485f1741e33ea6b56a7754653912a50af3154c9bdd41f05055b24f5278ed42bb54fc5acfb404e557c27887a38f9478e0420cae45dce7646f62fed47aaa38230080e0213776169cc4eb6c3f5c073c0ef79ec729ce2c2ce927930891e556a7bd287b052065a8a19df2930a3d5d96f66fd8e9f907974dcba6d82cfe4936f15a2e5b18d408ec767f13dc7ad6c7d997b6328f8aae495d188a452a3a62139f3f"}, {0x78, 0x107, 0x6, "b0e78fa4f7d401370499d3ab01f28e78688fdca9d9472ee664c6a4a30d064b6dc110629543112222edcb4376fadc0e223eb29dfa4ce4eac775a7c95ad3b47fa33364a7b296d039a3c79824d50631d3d5358af3295812905c25931fb948f1289651f0eb"}, {0xb0, 0x88, 0x2, "1c9008ae8ffd2f826135ceb08d8bfcb1a9fac6983dbfb9966c5e9d2675ba7d1dc3d46971dcaa117af452c00821638babe348aa2d8021f9de68379f71a9e81774e001b2cc6077c7e03a0ef4bcd8c15209f62b22eea2832e55cd446348f19299211ca59e65038011e19e01f0c110ef1a1f139272e5f4554e95652b43276a038f2888341788430c013ad14ddf34d15852e9b4464431592c25c543a0"}], 0x2b8}}], 0x8, 0x90) 01:50:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)}}], 0x0, 0x0, 0x0}) 01:50:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2200c001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000180), 0x4) 01:50:33 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x15}, 0x48) 01:50:33 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_FAMILY={0x6}]}, 0x1c}}, 0x0) 01:50:33 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 823.426153][T12461] binder: 12459:12461 ioctl c0306201 20001480 returned -14 [ 823.442480][T12461] binder: transaction release 469 bad object at offset 0, size 0 [ 823.442561][T12461] binder: transaction release 469 bad object at offset 0, size 0 [ 823.442628][T12461] binder: transaction release 469 bad object at offset 0, size 0 01:50:33 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, 0x0}}], 0x0, 0x0, 0x0}) 01:50:33 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0xff, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='-[\'+*]!].\x00') 01:50:33 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x183043, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 01:50:33 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={0xa}, &(0x7f0000000400)={0x0, 0x3938700}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) 01:50:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x17, 0x0, &(0x7f0000000040)) 01:50:34 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 823.950461][T12474] binder: 12471:12474 ioctl c0306201 20001480 returned -14 01:50:34 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8901, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) 01:50:34 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1b, 0x0, 0x0, 0x0, 0x0, "eb920c"}}) 01:50:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, 0x0}}], 0x0, 0x0, 0x0}) 01:50:34 executing program 4: syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000a00)={[{@fat=@quiet}]}) 01:50:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x64, 0x0, &(0x7f00000003c0)=[@enter_looper, @dead_binder_done, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs], 0x1, 0x0, &(0x7f0000000500)="88"}) 01:50:34 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r1, 0xc09, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) 01:50:34 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1000, 0xe02) ioctl$BLKDISCARD(r0, 0x1277, 0x0) [ 824.593593][T12493] binder: 12491:12493 ioctl c0306201 20001480 returned -14 01:50:34 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x64, 0x0, &(0x7f00000003c0)=[@enter_looper, @dead_binder_done, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs], 0x1, 0x0, &(0x7f0000000500)="88"}) [ 824.663437][T12494] FAT-fs (loop4): bogus number of reserved sectors [ 824.663513][T12494] FAT-fs (loop4): Can't find a valid FAT filesystem 01:50:34 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) dup2(r2, r0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) r4 = dup2(r2, r3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001480)={0x8, 0x0, &(0x7f0000001380)=[@increfs={0x40046305}], 0x47, 0x0, 0x0}) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000200)={@ptr={0x73622a85, 0x0, 0x0}, @ptr={0x77682a85, 0x0, 0x0}}, 0x0}}], 0x0, 0x0, 0x0}) 01:50:34 executing program 4: bpf$OBJ_GET_PROG(0x17, &(0x7f0000000080)={0x0, 0x0, 0xc}, 0x10) 01:50:34 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 01:50:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1000, 0xe02) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 01:50:35 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 825.076251][T12504] binder: 12502:12504 ioctl c0306201 20001480 returned -14 01:50:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x64, 0x0, &(0x7f00000003c0)=[@enter_looper, @dead_binder_done, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs], 0x1, 0x0, &(0x7f0000000500)="88"}) 01:50:35 executing program 5: bpf$OBJ_GET_PROG(0x4, 0x0, 0xc2) 01:50:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r0, 0x0, 0x23, 0x0, 0x0) 01:50:35 executing program 2: socketpair(0x2, 0x5, 0x4, &(0x7f0000000080)) 01:50:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1000, 0xe02) ioctl$BLKDISCARD(r0, 0x1277, 0x0) 01:50:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x28, r1, 0xc09, 0x0, 0x0, {{}, {@val={0x5}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "e12b11b8d565d4be"}}]}, 0x28}}, 0x0) 01:50:35 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x64, 0x0, &(0x7f00000003c0)=[@enter_looper, @dead_binder_done, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs], 0x1, 0x0, &(0x7f0000000500)="88"}) 01:50:35 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:35 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) 01:50:35 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000080), 0x1000, 0xe02) ioctl$BLKDISCARD(r0, 0x1277, 0x0) [ 825.878258][T12525] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 01:50:36 executing program 5: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x20001, 0x0) read$msr(r0, 0x0, 0x0) 01:50:36 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x98ae8c76558608c1}, {{@in=@empty}, 0x0, @in6=@private0}}, 0xe8) 01:50:36 executing program 4: prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='$/]#!\x00') r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 01:50:36 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:36 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)) 01:50:36 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) 01:50:36 executing program 5: r0 = timerfd_create(0x9, 0x0) timerfd_gettime(r0, &(0x7f0000000200)) 01:50:36 executing program 3: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x10e, 0xd2, 0x0, 0x0) 01:50:36 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8924, &(0x7f0000000040)={'veth1_to_bridge\x00', @ifru_flags}) 01:50:36 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000005480)={0x1ec4, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}], @NL80211_ATTR_CSA_IES={0x1e4c, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_IE={0xa9, 0x2a, [@fast_bss_trans={0x37, 0xa3, {0x0, 0x4, "fdb71ca990fd5d4a463504f1f35f641e", "dfba0498532bb57ad2dd07480c1fbaf271a8afcb5f1c3071f3bea5567b41c8a9", "72f9624e64e346b1fb2b6c8b438c2b77ccde07061ebe5e51b4d17733d669d8cd", [{0x0, 0x11, "f16dd4c5bf896977e48de5d75eb43b6286"}, {0x0, 0x11, "f6b48cde6aa1cf5924a16546be1e30aebb"}, {0x0, 0x25, "cc80697fc2cd62aec0ea91fa88c0ecb33d9f874e9ad37a171bbac781c62155d3cf25d85631"}, {0x0, 0x2, "0256"}]}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x0]}, @beacon_params=[@NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x12a0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd1, 0x2, "5e2f59f7a40702b8852cdf7302c7084482afa1670770c9c01aaf5e59b320cab4f6034b477d1b6c15261f710734cefa10caae934a5a43948a94b2d14b0720102edfd92c0a659b3c24684edf9c3823a04278d6b47b8778426994209edb048b10848eb4e72bee8c4bf3c207bd21a4cfbf8a75768635a0fc31624fe6052a90ed293126fc41aebec6278949ad110e55de86989a5548853cfd1f809885a88e0eb5896afd47a2d17a6b85adb46cadc1f6a809b5f204ad03ee2894d09fbc2f2923e58f0a5f91af81a334159167ac6a16c4"}, @NL80211_FTM_RESP_ATTR_LCI={0x1001, 0x2, "ea13410453d4869c99a28d47562e01db09df1f68b9602a8d5d18cd7927240c749287f0c211a46f4caa46186c23d6aaca1277b7c6eb6c4cc60200b3ab65b75ee2135d3ec651824e4a1e0cff24aba19fa15d04abca5dfaa09bea319e49ce7a31fc5a926355b3b907d2abe78c7888d41afe475ba335b84bc5e8aecb95ce84350deb4ddebd1fd5830c4798efee837f456804ec70bcf368ddada3730de54d2429dbcc337cde6be3f1792467b1a22d09d0aa7b7828ff604fb3acd5e5e595857d5ddb76138cc60e33a903a082b604a9e6b4cac73c44e1539ac1602ef6d3522882cd4bac85172b66b11a40b03aec6e74e7bcf8236b613fdc6648d2939902f11c383e6ac3d6780fd13b83d48130d54e7192f8683be848c77c66da7d616e5d3a5bfb7d911a030437161c453e952e2d71f21b8d6bca93c235ac2196d646c5644dcfcdf057144ad5441974ac56dec18ac0a05ea256e631ae30b8dd6d3d15cbe42e54f87bc677f78f578c2142b85d5d4a5ca09f17c7bb7c57937185a855a0d2ccf0a2b20e59116871adb509f07dbd8a5962622db38e049054e175a401637f495ff833062fe6d00b5c3a7d0d183c065693d79a44277422494ee8f4910262805835acb3f7b864f5d6bcbd8af50284f8dd05f5c4655789e6dcaec8ea7782899fd9a6574621bd69454fb4874be8bb5f3c3382e4d6b637b5779a11631f29b9d8615409acf8ea5e432ec46792a22c4c4dfd23862c2243347f18819c9f991ae994e3d60e5ce60be740ee77e5684714eb830b6f24e6a558421f62946e8ae5ca89f3008bd73627e41f3a6eb8bc57064cdec6ff69abf3582e5e9fd8b77fead68021176da2c9a5d47bb5b240fa72b2848d640ad6b8592c8582f956cf5617f810ec4ccf15752ac484c5ac8b59426c19a515f5f500e6ea3814785dd86c881f37992255b780bd3e04c71a8c96a261ce1a32f8f34b818c4884a3d4a5d044d4b7279778adb32638f4dca5147623ceb5ada49cad99d40d67e4ad358812b7ab5179f175d5bbea33c472d47af97342d6c499ce9e6e83c9218fc72ad78b8ac155b60ca7f028955fd34a19d008ff9203e8f3797d4611a2dd3f13f737b6c995dabb57c3c8e155d92133e2b90ca97f1eab92a547aad2421e891799dab8429bd6af7d3259390309751a79dec24c6973a4eea47ac0d53c000a392decfa4c1ee3dd43a6cff899be4e1f7160025ac72b9698217651c750265955a24743f03a37cce3f09a89c1ef195e0ac57834f3b52702141459d48d2d14562be1fe43e71ddf1131771f1c78193b3cec3bba6433ba0505cf712241cd39ac457934780b7ede63697072c8519287f8a035081765bb9c7c1e9a1dc8d42c4348da300b117195957cbcdb319f26481e2a440339a6da58876043e123201dfe2ffa665378748c26d5022e8877d32ba50f73a0d103138087fb3007725acdb2f089b508659cb56621b3142f74b54c37dc6d0f4973223574c0aa2e6f2e8bb078144ebde3dad2fe39d87d7200090487416e322255cbbe62bef121daff041cff32baa421be69b24efcc29903a0281b89b6dde0fef5d86c8e3799f2367d260b070d629ac60a9c1c95e62e7d0a6015b1a313f0606b0fee3879569fd7451f0dd16880f2090405e115359c1b990e6a2177a8c85f73f89e4a2b6dd57a0e01fe4ba030db747e651902eca565588be864a4a829a22ba3bacd5ce6d641b15259181cb16d3b0316145caa0cc17192411f76756a73dfcc3c3095a946803c35195b284834730c3fee341f39031f91136dffbe1b4dac3f549751501dd436b391eeef8ec52ad9a145d80766ec53905c052bd0d6d7b62f84d9880263bc8bd5aa43c6c78b53426af9dc781ba81d818a1a22f5324026dadc29698a2478ce0d96710d5276e543dfc9210f0ca1a51fec4d2ae8c9ad64c15ad20bdaaacdb71d3dfc67cccb9995a4110f023424f1a0d21780856f4fbccc58e263cbd643ef9f2ccfff4ef3d7fd290ca756ebbdc3a3899906d2540fe2731ccf8a04c2b9f5137a1f5bf3f7e9840cb258c6f1699e9b7302d87818672298f2de42f170287432cd848b62eeff2d842180851bf9f0f252fd0f70a429c67ce91e3c09b63a2e2a1c751e222240b426ba43348bcf3f010de1935b76a8896859142a8c9f6751ec257b2a205af468534b1972cf303e8e797900dcca8496dfb491f55760018d7b6b293e783c6f03b94bf9824a6af39f8a5bc72162336ecdfc6a3fbf83a3bcf368b31806bd1ee2c45be3a18338136447f7da5964f177f1439abd470f81fe5d160a6e3083ad73a9326dd42518d01fbf8e0cc3958fb33253d3a31d1be1fa0d4af148eb70446d64c3088c412f9ebfea57085a78199327c9722b09d8cb66d8062d93e9c41de0186e47fcc4c475e9e27838cebcbe67dbb47d2c6e57b690ec2535cee27dcf499d914b6f67afb15a581618ea49ffd2c23a3d69a120491c7d38e53731292ee9515d61eb48eafbc89ec2092c0e72372c382f22563357bf5c4e352465ab34989f75057fdd87e47e03775a13762dd042c56a8a952d0dff59c1de347d17775ae0ba1d33ce39b05bd79106ea0e74116ec87f823d9b234930754b8c19f9bfd5677f5798f8b60c79ef0a31839be8cbd730ffa8a14c25f72201566f50a141546110874b71aab40f4b28f62cab379e462936b8504738e999c6398f73fff5efa7d6ee12e64b97f36fbe287de7e4e26c4e50b5eb25648bec8be64e23ae3662dee6c43332c4033d0bf5d6089c162b424b1be6f7b5f9d1bf85375b9427ad8d224ea3d20ad997693592d2ba29d524812982ca47dde4b1f33a3e6463f0ec1f0117256efb4d14d616b2d96939a06e3df47a61f1de8814ecadf4e7fbf21b3e0aaa11ded8b61234f0224ca941b2274fa9e15ae87d2b9d9d363be80858559f4ba09c693955689df8b7f8380f208ffbff874500b40332714bd30d1a433eddd921537a2527172b4c9df39cf75bbd468ae59c05d04d848f15698c382c532db403576346ae278833291c2524cc6d80eb8a54a288c3707293ef89004c4e7539a52bdc872103979fd4a4a2e18fbf75599d7f8588f54960e247614ada08adca613dba93bda668852941b968032b22a9cf4f4231c5316f75432dbb0e8c28f4b5fd3871c5e326ac40a832f165e57c7f322e6ac8694dc55d420d31dfcd6f261c68e6a55e47f0057c37cdbb90c855f5609f016cef311cbdc0017c7755c62e693d7b4c9442783aa3cd818f85c84d32ccc6632ef7b6dfb4f48d8916a773d09bccd6c9d6b00adddf950790b65fa96ce6d4cc3477bf0551a6f9b381239f6870bbf135a1b040d9187dbf2a37e62c615b9c316e068b28d8a2bf158351358a6279d522be4e8f1505e634d12a35f9b827b4de91b709db113207cfbe5924555876ee87afbaf97a7f454b33d605dae8cc74aaa7331a8725947dbce3722f77a90d9c24241f2ae2be8a12cb11a2ee09364ac6b8e3d3bfba445048eb17588e345d5a41620a505019cbd0a6b1816773c3d653b4077f36dd0400252f9d701ac5f269dfea41ac1d6618f867f93c6943b50519fc44c51906198c260f23452cd372cb8782a7b52de0e2eb854f909e687e9ca6c6b0aa19c96b753352543059a37cefe967863ac11ef152fdbec31e646cd742305c21810b3ad05fa88300862e5f0918d1d793445b602012309768ac2452bd1e227c71b43e866dcb9edb50af160df7211b166e404d0891186af8a667e34dd1f45b0848be529b21cc0000b764afc78fb9a76196555ef0c7990f5f7a5dd3a438f7af8cf2512de7bfbfdb89767fcc91348b080d5a1747b7c1765965ffb6d136099a47a2f5aa8fc11b7be8284870afd1e2f073984cb453f00f26ec6f48a8ac32c580176786766686d6bdd1055625483945d7e657c6ddb454ceab16a92b02b6bf73b264c60e81ccd16c93bfb578ed8231b3a4984d7a471fcdc7d17bcae0a2e0eb94599c0d40eaaae04f8ab13bc88156d0d7f4dfd382be3641be21726bc31a148050bd971b58ec203d9d238068872d6b29ca1950623beff0315638454de1477634db40e58d675c9950c1c0149d8799c9e113bf9b9ad237e2a7c3e917321ec9eabada78b0a0debb731acef44761af851bd7da5a0a037c19591f71eba3b00a944445ce1f70070a033c32bcfb11cf65cb03cc58ba1b4ef5620c1e1c616f1c628ffc8cbb6c71346fb5b47826c802823da276e7b95acfd1046e80b27f690afd2e2fa480fb18e92bc00193e4a81902fea250786a8bead56fde75fe1641cf38504aa2591f3f20c0b3cb7184e76e55d1ab27e8e529efea5b726333a5ebfb4f514ac844fe2420bcdae214332af28c8116cc12ccba387ac8b6f64ea2f4fb31695682e27903bd449bcb33878a3e6d1fc221989b618b2f45422776069a993da4b61ce862c396afdfd0334da70108f74be35e557027744aa6a7c867341c8a7a33ad46642e2601487db9854b44eb004e1df63b6b63776d66a9c3e037daa0da646cccb30a8013f2f31a0bb62b8487532a7e196ea33638f44e5d9ff6044b65635d44ed93797b8a1ec0ea7a378c0233e879e9ba3dc0cb799cf4add782e075bdbd469090c0a8ea21ef47db15631790570aa27e8069c162def6333aa37a80811ef15a7eb8787c5b75f5b0623a77c8c00b5cbed51c58aed017338daa472d1acb1229465ec8bbd161f81eefc3368d501cf3f4c067e4789aba7716e1159355279767243a1979f15f75befe7fb992303d6db529cbb8026eaca82bb348952af292103cde0c19356c4d9a5120fee1aa0936f7d26b05d0646c94d5e4f44953771ead95c6cecfc9c6ad3ff8511208a343b40852dffcd904e5e80ee584f6d93c5d8d080a7b2dbe6f9062ff8578f8bd2441df3823fadd7887ec353a38ec3dbd0d6b6df21a75b9aa62c36750ebad6dd08f422d5e61e5b6241d588a1b13446b317f851409c3e4daac6200ed5b89b534776d5e78619ce8d78c3ad7f2702e05f8caa2e519e031ea767b8d21317356a623c552aaaa8584bd50ad568f87dd485e414d6b7d896c2bcd2a781f4538bb3dcda3eff91c7c9dcf7f8b500f604bf973d8dfd84a930891bf9da6742a72e1a7c95ff812f9febf15282a4ccc531b7793afed288a698e010eb36bcc6a9af153b94f014af26855debe0395244d62eae19335807b0fe93d1c6d699cbe675522ae34d9d40915062d5a32e0c0b95b51df93bf0cb28a8dd15a3902ab47da2d425a68ca88e8413b750790159348e84c819128fd6010a73e004bb8e5d2bc38812fa3d597fece9b1c8e40b814f3236c048dc118d8775ff8137757aa617beb5fead263bcb941158ce9eb05d159f5c433f8a39e6c50d3f71cdd3b4d955301774d4359ede2738321f913d558119d678414f495fbc567ac4bf5806549aef6ebe81a959bea090367661f2bc8a2098b9f144614335d050335dac151c67cfdf25a8dc51ce0cf09351a631fbaeeadab99e8ca3f24f493344485c09232b5737f40341984ca85cc98d308a59d8bc5e157c21a1029a286f3a023d0828ff53a9670a9d02ddc82161ebc438c546f3e46768e39605e5d254bcdbc68acefb61ea85c54f19a05fad2d5423f087d0a3143200198a6b8d4129330b10710f63c30d666689aa15171550182eedec24f800f89e80a81afb83ec209e69b38ab7cf218ee94acee4ddbc2f235cb3b00112a8a689c572b60fd4077c464d0bb72a23d38eec847780ddbd42383a288059df2c9ccb5401e1a86b84ddff0d4308e281a60c1df067e434b2c12212e76b8fd4cb015191b84c392a810dba10d38ee26051c47d3989eb1ddaccd"}, @NL80211_FTM_RESP_ATTR_LCI={0xbd, 0x2, "69522faf3ede99da311a00f4d33f383b132ec1a0078ddc835f46cd4626078aeaa885e5dd60f903fe85c7da5a0daae0324af208084e4d828f448949e7beafdef174718912b73340295c7debe361172f1b6b2cb9d24f084dd606d287972d7486c8a401af1d68727d1be6d24eee4cd5eef5a6959bd222104b12843fad84836a5612402f982c44269d3675beb8ec63811442ca90f9c60477eb4c77a5172c94d0118085081f1ceedece0e941e44155ffa0cc3b41839f6902e0b451b"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xfd, 0x3, "8a7e7364d0d78ea024bd700434b003fe03710ab58cd700597586611f78052626e9fbdd6d4636573e4f7f26bc37d1d5c3100e2d92db6ef323fb3b8cdf9cabdf4731d3bd83a48236a191a472634881718c86d6478d7c4491e011277474eed647c35a3426031ab1a5f5609754dcc90c8db4d5e029ea2f8c56e4eb191a62c5631011475175bbab12daec97d658bca6ecc2e4b8b2c538050fa98dceee785ebbed9631933b261b677de8f118162bc71bcb71fa465ad7b6239ca8a696a0b1571a8720de9493325a7c29e42a5c3c26c5a024a73bd9a136692f9dedf7cb13f8d4d6a8a70e68b109d670543dd849aa9cf0e4e9fd7c0036a4b17b71e079d4"}]}, @NL80211_ATTR_IE={0x4d, 0x2a, [@cf={0x4, 0x6}, @challenge={0x10, 0x1}, @measure_req={0x26, 0x36, {0x0, 0x0, 0x0, "0142b4f2f738e2004e78aa84be3c6b349bc09f5d9a0e4d1c80209c05fcb15d0bc51547fa69e5743a583b1766a803fddfbf01fc"}}, @ext_channel_switch={0x3c, 0x4}]}, @NL80211_ATTR_FTM_RESPONDER={0x1bc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x35, 0x3, "86f8510888cb8057e5e0f0279857e04a6657806ddd5f7c7c4d0be17576e4a984bfe8ef6c31fb25d145c1fcc622f45a6b50"}, @NL80211_FTM_RESP_ATTR_LCI={0x5d, 0x2, "a3cb40b4171da0a72c5e7b0b64c4685228879c3ba8caac746fe5850e844f0298af4b2a482162dd165348fedc36edd8c279956bdb2579a213df1b32341e596fc52002e6c219edeefc5fa656563f5b435d1fac91ca5a4cdb496b"}, @NL80211_FTM_RESP_ATTR_LCI={0x69, 0x2, "54821df209af55d132ab567426b51d0f0cc2f637f8d32f3d4ebddb8ac3312821210760f90392c81f86ca51f245a6b466b2a115ec47b04f41c85f952009d79bf3856ddc8a5281c835197baa6ce377ac62f1a33da85c7266212075aa293cdba362a782db9ea4"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb1, 0x3, "d9ccb1fc84405b70fb976d12d7edb36712b22ba36394a9cef972efd8bbc8ef4eeb025295985eb908c4baac335ddd4378be7f066bc41778c8eaba02a53aac7e7bd72c3cccb66f406d018cc046c0406f75d6afa39e42484d82b6434bc7a22cfb4734bb4a75833058caf0ac05cba6b9cacc1f6bfda0b0d2590d6abb2a0ae34d008f53b51ff7b80a5fc293859c10fd71dd5f3ad7f151060ef33f77378592e5a658005ef7fcf2d0831f0be9d4c24ea6"}]}, @NL80211_ATTR_BEACON_TAIL={0xb1, 0xf, [@fast_bss_trans={0x37, 0xab, {0x0, 0x5, "67cdd29c784172d79b30120c1eb96b5c", "ee304cd32708fd178026df9c4092f0cc51d8556a65fb87270c8d1dbf628ba755", "61f4aaf769db265ccb55dd8dd4c1b760d2a56fec2e437ec1af27455c80427cc7", [{0x0, 0x15, "d3c8a8604607dabe8736d325ae6389443e69fb4161"}, {0x0, 0xf, "2043b948100b7c5680004a10b214c1"}, {0x0, 0x7, "a08784114f490b"}, {0x0, 0x1e, "357f8b77c382c62ceafa14024faf95f438d8b4ef9e642cfa66d3c7b379bb"}, {0x0, 0x6, "60acd027ff69"}]}}]}], @beacon_params=[@NL80211_ATTR_IE_ASSOC_RESP={0x18, 0x80, [@link_id={0x65, 0x12, {@random="b4e61c0aa06a", @broadcast, @broadcast}}]}, @NL80211_ATTR_PROBE_RESP={0x2b1, 0x91, "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"}, @NL80211_ATTR_PROBE_RESP={0x561, 0x91, "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"}]]}]}, 0x1ec4}}, 0x0) 01:50:36 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x1c, r1, 0xc09, 0x0, 0x0, {{}, {@val={0x8, 0x8}, @void}}}, 0x1c}}, 0x0) 01:50:36 executing program 5: r0 = timerfd_create(0x9, 0x0) timerfd_gettime(r0, &(0x7f0000000200)) 01:50:37 executing program 3: bpf$OBJ_GET_PROG(0x14, 0x0, 0x0) 01:50:37 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0x8, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x4}]}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8}]]}, 0x30}}, 0x0) 01:50:37 executing program 1: r0 = socket(0x2, 0x3, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 827.157397][T12559] netlink: 'syz-executor.2': attribute type 8 has an invalid length. 01:50:37 executing program 5: r0 = timerfd_create(0x9, 0x0) timerfd_gettime(r0, &(0x7f0000000200)) 01:50:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000040), 0x4) 01:50:37 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:37 executing program 3: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x890d, 0x0) 01:50:37 executing program 4: r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 01:50:37 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x81000000) 01:50:37 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x4, 0x0, &(0x7f0000000480)=[@exit_looper={0x4008630a}], 0x0, 0x0, 0x0}) 01:50:37 executing program 5: r0 = timerfd_create(0x9, 0x0) timerfd_gettime(r0, &(0x7f0000000200)) 01:50:37 executing program 2: execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000003c0)=[&(0x7f0000000180)=')^:#{\x00', &(0x7f0000000400)='{!{\x00', &(0x7f0000000200)='{:{P}..\x00', &(0x7f0000000280)='(*+^:)+\'}\x00', &(0x7f00000002c0)='%-\x00', &(0x7f0000000300)='):-:\x00', &(0x7f0000000340)='\xe19\xc5', &(0x7f0000000380)='\\\x00'], 0x0) 01:50:37 executing program 4: syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0xe111, &(0x7f0000000a00)) 01:50:37 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:37 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0xff, 0x0) mmap$snddsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000000)='\x95\x00') [ 828.045068][T12583] binder: BC_ATTEMPT_ACQUIRE not supported [ 828.045113][T12583] binder: 12582:12583 ioctl c0306201 200005c0 returned -22 01:50:38 executing program 5: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8940, &(0x7f0000000000)) 01:50:38 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f00000000c0)={0x0, [[0x80], [0x1], [0x92a]], '\x00', [{0x0, 0x80}, {0x0, 0x20000}, {0x0, 0x1800}], '\x00', 0x500}) 01:50:38 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f00000003c0)=[@acquire], 0x0, 0x0, 0x0}) 01:50:38 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8981, 0x0) 01:50:38 executing program 4: r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000000)={0x1c, 0x1c, 0x3}, 0x1c) r1 = dup2(r0, r0) getsockname(r1, 0x0, &(0x7f0000000140)) 01:50:38 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x1c, r1, 0xc09, 0x0, 0x0, {{}, {@val={0x8, 0x10}, @void}}}, 0x1c}}, 0x0) 01:50:38 executing program 3: r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) fcntl$getflags(r0, 0x3) 01:50:38 executing program 2: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019080)=""/102376, 0x18fe8) 01:50:38 executing program 1: r0 = socket(0x2, 0xa, 0x0) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) [ 828.845532][T12606] netlink: 'syz-executor.5': attribute type 16 has an invalid length. 01:50:39 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000002800)='./file0\x00', &(0x7f0000002840), 0x0, &(0x7f00000048c0)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@defcontext={'defcontext', 0x3d, 'sysadm_u'}}]}}) 01:50:39 executing program 5: socketpair(0x26, 0x5, 0x0, &(0x7f00000004c0)) 01:50:39 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:39 executing program 3: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x89e1, 0x0) 01:50:39 executing program 2: fanotify_init(0x49, 0x0) 01:50:39 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:50:39 executing program 4: shmget(0x2, 0x4000, 0x600, &(0x7f0000ffc000/0x4000)=nil) 01:50:39 executing program 5: r0 = socket(0x2, 0x3, 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x890b, &(0x7f0000000000)) 01:50:39 executing program 2: fanotify_init(0x49, 0x0) 01:50:39 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) [ 829.523951][T12625] binder: 12623:12625 ioctl c018620c 200005c0 returned -1 01:50:39 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f00000001c0), 0x4) 01:50:39 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:39 executing program 4: bpf$OBJ_GET_PROG(0x12, 0x0, 0x0) 01:50:39 executing program 5: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='nfs']) 01:50:39 executing program 2: fanotify_init(0x49, 0x0) 01:50:39 executing program 3: syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x0, 0x0, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)={[], [], 0xa}) 01:50:40 executing program 1: r0 = socket(0x2, 0x3, 0x1) bind$alg(r0, 0x0, 0x0) [ 830.119524][T12641] FAT-fs (loop5): bogus number of reserved sectors [ 830.119601][T12641] FAT-fs (loop5): Can't find a valid FAT filesystem 01:50:40 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:40 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000340), 0x0, &(0x7f00000003c0)={0xa}, &(0x7f0000000400)={0x0, 0x3938700}, 0x0) 01:50:40 executing program 2: fanotify_init(0x49, 0x0) [ 830.271739][T12645] FAT-fs (loop3): Unrecognized mount option " [ 830.271739][T12645] " or missing value 01:50:40 executing program 5: r0 = socket(0x2, 0x3, 0x1) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x1) 01:50:40 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0xfffffffffffffcb6, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "d71cf1075e908863"}}]}, 0x2c}}, 0x0) 01:50:40 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:50:40 executing program 4: r0 = socket$inet(0x2, 0x3, 0xbb) bind$inet(r0, &(0x7f0000000000), 0x10) 01:50:40 executing program 5: r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000019180)) 01:50:40 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:40 executing program 2: bpf$OBJ_GET_PROG(0x12, &(0x7f0000000080)={0x0, 0x0, 0xc}, 0x10) [ 830.747763][T12658] binder: 12656:12658 ioctl c0306201 20000140 returned -14 01:50:40 executing program 1: r0 = syz_usbip_server_init(0x0) write$usbip_server(r0, &(0x7f0000000000)=@ret_submit={{}, 0x0, 0x0, 0x0, 0x1ea, 0x0, 0x0, "", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x1ed0) 01:50:40 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, &(0x7f0000000640)) 01:50:41 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0xcd, &(0x7f0000000100)=""/205, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:50:41 executing program 4: syz_mount_image$vfat(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$fuseblk(0x0, &(0x7f0000006bc0)='./file0\x00', &(0x7f0000006c00), 0x0, &(0x7f0000000080)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'system_u'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) 01:50:41 executing program 2: syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)={[{@fat=@fmask}]}) [ 831.153625][T12669] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN 01:50:41 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:41 executing program 3: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) 01:50:41 executing program 5: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0}) 01:50:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) 01:50:41 executing program 2: getresuid(&(0x7f0000000040), &(0x7f0000019080), &(0x7f00000190c0)) 01:50:41 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:41 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0xd, 0x0, &(0x7f0000000380)) 01:50:41 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x8) r0 = socket(0x2, 0xa, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x5411, &(0x7f0000000000)) 01:50:41 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8913, &(0x7f0000000080)={'batadv_slave_1\x00'}) 01:50:42 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x541b, 0x0) 01:50:42 executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x18, 0x3, &(0x7f0000001040)=@framed, &(0x7f0000001080)='syzkaller\x00', 0x2, 0xf6, &(0x7f00000010c0)=""/246, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000013c0), 0x8, 0x10, 0x0}, 0x80) 01:50:42 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b68, 0x0) 01:50:42 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:42 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x5452, &(0x7f0000000080)={'batadv_slave_1\x00'}) 01:50:42 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x2, 0x0) 01:50:42 executing program 4: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x78, 0x0, &(0x7f0000000100)="3a454aed1eb543c7e270a7dda1fe6df6f8c776f0294423d7954d3ab893c24b03352b0db55e28eeace31fcb90edfa6aba40ee50d97f1569c2e9359a88e29f61de7ad2f5b6dd51a8243652f37a3e31bd339a3ab9fa79a2f8e6d37a1a1d7c222eda9e3dfa9efed92c980cb3bf81670258deed16a79a889e9880", &(0x7f0000000180), 0x0, 0x0, 0x29, 0xe2, &(0x7f00000001c0)="a0ce4645962565eb487836859e7cb5e48ea29c3fba7bb0c263e698ce9ec8378a5e045b482d72c2f2e2", &(0x7f0000000400)="3c68667ff2ecbfd3fcbadcb35e09eb8d41dbecfb8c8fc0fc14f3fa5576cb8cdd7aba2f34112c361f3b4f28b1ef85e75fb243fbcc90c6ea5dc811f895f18002ec0a0e762218026549f0fa8271e86be55098db22c2ef94f1d4d84f513690a9ef19ad4e5d51c423376c7397c6d1b5efc33b960096a035b1b0f36a985147000098377a7a6836e9532ba3b5a4f7e3cea7ff4fba3133928d066a02fe498020e77e6f396b844f83bc0d7a3fe3da72b68e1bca4b71c3b01045d64b4e24769389ac2a09239e12e5b2d2e2e46f294a078ea00ec44a5b7659900737b76115f3955447e5b7cefa80337eee2dde5b67", 0x1, 0x8001}, 0x81) 01:50:42 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@get={0x1, 0x0, 0x10000}) 01:50:42 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x2f, &(0x7f00000000c0)="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", 0x108) 01:50:42 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}, 0x5000000) 01:50:42 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@empty}, 0x14) 01:50:42 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:42 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8912, &(0x7f0000000080)={'batadv_slave_1\x00'}) 01:50:43 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x0, 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) 01:50:43 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000a40)={&(0x7f0000000600)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}, 0x400c0) 01:50:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x40, 0x0, &(0x7f0000000240)) 01:50:43 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 01:50:43 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5609, 0xc7a56af66bdcf8c7) 01:50:43 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:43 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x89a0, &(0x7f0000000540)=@add_del={0x2, &(0x7f0000000580)='gretap0\x00'}) 01:50:43 executing program 5: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b41, 0x20000000) 01:50:43 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x4020940d, &(0x7f0000000080)={'batadv_slave_1\x00'}) 01:50:43 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x5421, 0xc7a56af66bdcf8c7) 01:50:43 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000009c0)={&(0x7f0000000000)=@file={0xa}, 0xa, 0x0, 0x0, &(0x7f0000000bc0)=[@rights, @rights], 0x20}, 0x0) 01:50:43 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@flowinfo={{0x14}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x0, 0x8}}}], 0x30}, 0x0) 01:50:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getpgrp(0x0) sched_rr_get_interval(0x0, 0x0) timerfd_create(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000006180)) r1 = gettid() read$FUSE(0xffffffffffffffff, &(0x7f000000f900)={0x2020}, 0x2020) sendmsg$netlink(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f0000000440)={0x10, 0x39, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}, {0x0}, {&(0x7f00000019c0)={0x5c, 0x0, 0x0, 0x0, 0x25dfdbfe, "", [@nested={0x4c, 0x0, 0x0, 0x1, [@generic, @typed={0x8, 0x34, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="a7ed3431a7ffdc9495090b5bb789879d97545eb4b7679adc21c941fb3379dc05eda4d9bd5cb0ba914b69242867b4e5f9a53d71ce508ddf8f"]}]}, 0x5c}, {&(0x7f0000000180)={0x10, 0x0, 0x0, 0x0, 0x0, "", [@generic]}, 0x10}, {&(0x7f0000002b80)={0x1c, 0x2a, 0x0, 0x0, 0x0, "", [@nested={0x4}, @generic="8d72a1", @nested={0x4}, @generic='5']}, 0x1c}, {0x0}, {&(0x7f0000003ac0)=ANY=[@ANYBLOB="c82500002400000226bd"], 0x25c8}, {&(0x7f0000000340)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x4d, 0x0, 0x0, @pid=r1}]}, 0x18}], 0x8}, 0x0) 01:50:44 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 01:50:44 executing program 2: openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x42880, 0x0) 01:50:44 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) 01:50:44 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:44 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3291537accf53074}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 01:50:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000540)=@add_del={0x2, &(0x7f0000000040)='vlan1\x00'}) socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, &(0x7f0000000080), 0x80800) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000000)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000029c0)="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", 0x1000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, 0x0) read$FUSE(r1, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f00000000c0)={0x90, 0xfffffffffffffff5, 0x0, {0x1, 0x0, 0x1, 0x2a0aff97, 0x4, 0x4, {0x6, 0x7, 0x3f, 0x9, 0x8001, 0x1003, 0x9, 0x0, 0x1, 0xa000, 0x107, r5, 0xffffffffffffffff, 0x0, 0x1}}}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000200)={0x10, 0x0, r4}, 0x10) 01:50:44 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2}}, @sadb_lifetime={0x4, 0x8, 0x2}]}, 0x90}}, 0x0) 01:50:44 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xaa) 01:50:44 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x4b6d, 0x0) 01:50:44 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0x2, 0x0, 0x0, @mcast1}, 0x1c) 01:50:45 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x200}}, @dstopts_2292={{0x18}}], 0x30}, 0x0) 01:50:45 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:45 executing program 2: socket$alg(0x26, 0x5, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = accept4(r1, &(0x7f0000000040)=@ieee802154={0x24, @short}, &(0x7f00000000c0)=0x80, 0x0) accept4(r2, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000180)=0x80, 0x800) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@add_del={0x2, &(0x7f0000000580)='caif0\x00'}) 01:50:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x7, 0x0, @mcast1, 0x3}, 0x1c) 01:50:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f00000005c0)={&(0x7f0000000300)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000340)="33fae69a60799225887f84211b407ed2f84e94f2c239dbecf291329923afa6293d4ac8d691945e8a91e28821f6d13b3743e83c339accdf61eab15964a59fe19d2740f879f946aa4ae9a31669cf23a3", 0x4f}, {&(0x7f00000003c0)="2559605bd459d19dbf71e677dc82d9f3f6124efedc094254183fb3ff13dc7d5ef1fdd701dff066d26e6510b64bc4db604c59cf3e28c126100de989722ed886db54688b68706f144664e97074132572117a5b548e14f34f6692b76285d66e72d1882a8b56271763a429e5c23c7eda1ba069f597ce37d6ec7ff54648f09970a45e8721045e27b72a57a67c26b681d867a651f2f64ad41bf3cb9c4865d94fe9459be21d70e291ae50e9cfea810fafe46ee2cf2796c2ee0e236d55bc68eebbea238dbf249471543e0c227b95ca4bf6f4fbb21b2d4b9bcdf136a0a550db139cddcdf6948c630881cdfd31d6f772", 0xeb}, {&(0x7f0000000a80)="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", 0x413}], 0x3, &(0x7f0000000740)=[@hopopts={{0x70, 0x29, 0x36, {0x0, 0xb, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x0, [0x0]}}, @pad1, @jumbo, @jumbo, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}}}], 0x70}, 0x0) 01:50:45 executing program 5: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0x4b47, 0x0) 01:50:45 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3291537accf53074}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x33fe0}}, 0x0) 01:50:45 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:45 executing program 5: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000002009040000fd0301000009"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000080)={0x1, 0x0, 0x4, 0x7f, 0x1}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000940)={0x0, 0x9, 0xe0, "ae7da50f9f5841e864921269e39b7f0253e9cea5fbe309b4cbb58a0f4c207652ccb10549e7e756fa5cf1421d9c5772502507d9ba73c834f6fa49a141f7a0e634a65f7384b7261c7fc46d2e637a818145118789ed22c8f48804893cf2137d6cb50a97521b311a812d21def3d25cf7657954f113b934a6066ada35350d3f2d587fc6b0767b7ec221b5c973343a8bd6295528d1b696f68bb7c617cc0224847cd2d63a45184bf1e0c4962c9deaba64ec225570838ddeaaf4ccd829ceef032f995b735ea90202d665acfde65dad7758054799323fbacb83ba86bab66cdc1f46390b12"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x6c, 0x2}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0x1ff}, &(0x7f0000000c00)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "2cdd"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000d00)={0x40, 0x13, 0x6}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, &(0x7f0000000e00)={0x40, 0x19, 0x2, "eb1e"}, &(0x7f0000000e40)={0x40, 0x1a, 0x2, 0x81}, &(0x7f0000000e80)={0x40, 0x1c, 0x1, 0x3f}, &(0x7f0000000ec0)={0x40, 0x1e, 0x1}, &(0x7f0000000f00)={0x40, 0x21, 0x1, 0x2}}) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x2c, &(0x7f0000000d40)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f0000000040)) 01:50:45 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8937, &(0x7f0000000080)={'batadv_slave_1\x00'}) 01:50:45 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@loopback, @private0, @local, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1400081}) 01:50:45 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='.\x00'}, 0x10) 01:50:45 executing program 4: r0 = timerfd_create(0x0, 0x0) r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x300, r0, &(0x7f0000000000)) 01:50:46 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x7}, 0x0) 01:50:46 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:46 executing program 4: syz_genetlink_get_family_id$netlbl_calipso(0xffffffffffffffff, 0xffffffffffffffff) 01:50:46 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8942, &(0x7f0000000080)={'batadv_slave_1\x00'}) 01:50:46 executing program 1: syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, &(0x7f0000000080)={0x20, 0x4, 0xf4, {0xf4, 0x21, "541faee95faf8cac02a0aa6b7f2c28aa81de951378f44e10b7e8d122436b6c9909d72f089e48f22e5e9e572e872eaddf5aed8e73de86723cbcb576040295300611653688777a94e8bd53eeb6de292bc3c5940f0310ba66e8fe81e69a3416271926d2c35b0694a915a8fdb0c0d43c6f5e53e738a524c05b12f188f23309031ed39780b646ebe5aa7cd37a468c5b393ec1eed408a4b8eb91fe51f83934878cd304ed6f3eb405e164269fb820ac96bdc060dba502efcd6d8f25a10b09832756e8a580a146c5556624ccfed06a5b5566708931c38e23fa55cca52f195a824a02baf3c97769797fe17fae24cb2b65a130a14b8f64"}}, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x44, &(0x7f0000000200)={0x40, 0xb, 0xa0, "75aa3db021a8beb889b568038d6a61c8f5e668e943364215c61827f9509d63a740da4b34810b065ddb24b8d0100890dc91524c783d9612a25f36fa509970e0972e2ce415fa01bed2254ab565da86ec1fc9090fcc3020ba39d0ffabecfe65579cf383d16eeb81a29b6d99a58e852ea8ffc2bff10095b07f7bcef5c892dd43fa7569b23b551a95b2426fe1d3e6a30c60f6a28e01ea50edbd3e8345be99e1ee3090"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x6, 0x7f, 0x5, 0x38, 0x9, 0xfffd, 0x8, 0x4, 0x17ae, 0x9, 0x5, 0x9}}, &(0x7f0000000380)={0x20, 0x85, 0x4}, &(0x7f00000003c0)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000440)={0x20, 0x89, 0x2}}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000540)=@add_del={0x2, &(0x7f0000000580)='gretap0\x00'}) [ 836.212992][T12730] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 836.573854][T12730] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.573981][T12730] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 836.574117][T12730] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 836.574300][T12730] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 836.574429][T12730] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.578238][T12730] usb 6-1: config 0 descriptor?? [ 836.624765][T12730] usbhid 6-1:0.0: couldn't find an input interrupt endpoint 01:50:46 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8906, 0x0) 01:50:46 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 837.539447][ T1198] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.539630][ T1198] ieee802154 phy1 wpan1: encryption failed: -22 01:50:48 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x7, 0x0, 'lrw-camellia-aesni\x00'}, 0x58) 01:50:48 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000005b40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x5}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000040)="173c294b02a1418a49c7c3fb1b5b712378894ae947823e3812de55fbf0c571db0cd209da74d0916b1c377a92d97af2a338efd6151b9a1314aa38d54378b0159996b0e312b491f62c15a5e661abadec010e09be87243df2511ea9f9eef465c5476d25d495e21a54c903d2fb201fcbca74daec249c30ce2f19513aebad40808e1a2724b3c4e4149b50c337c9", 0x8b}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x0, 0x0, @mcast1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0xabe}, {&(0x7f00000001c0)="bb", 0x1}, {&(0x7f0000000200)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)='3', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2000c000) 01:50:48 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ac05438240000000000109022400010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x2c, {0x2c, 0x0, "a05402ce66f1494c614c519bfa6be2188744b24752012efdcad37f71915910344824f3a6759c5f8a3311"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000d80)={0x0, "a29485e7440b0c29efbb5fec50fd004efff11175ca3ccc620818c1011a05853083e1c18765bdf376e1eaddf63fd797a51f7d19d17e4c4d1dfe8feda856a224e0"}) 01:50:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x10, &(0x7f0000000280)=@fragment, 0x8) 01:50:48 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local, 0x2}, 0x1c, 0x0}, 0x0) 01:50:48 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 838.878131][T12730] usb 6-1: USB disconnect, device number 11 01:50:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000018c0)={&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0xa, 0x0, 0x0, &(0x7f00000017c0)}, 0x0) 01:50:49 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x4, 0xc1a6, 0x4}) 01:50:49 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind(r0, &(0x7f0000000040)=@in={0x10, 0x2}, 0x10) 01:50:49 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:49 executing program 5: r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ppoll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) [ 839.232967][ T8323] usb 2-1: new high-speed USB device number 5 using dummy_hcd 01:50:49 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000200)=""/241, 0xf1}], 0x2}, 0x0) sendmsg$unix(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000e00)="69ac14cfb59a36ea15a02bc6c0c9e7677ec77882b67b0a2b00941be90cd4192f324ed9eb82f44355e56e61a5316072e4f8aeb0cf2130257e799a700e60d69b562d7f38841c818b5f17d4b51f915f2b21006ed332476cdd0dd95064a938b76722f39fa0b76f17e37fd7f42f43a0d5bc1ffae786eaed81ff29e781529c8d56978a79d28c2b6be3414631a860aa59268cf99c", 0x91}], 0x1}, 0x0) 01:50:49 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) fstatfs(r0, &(0x7f0000000200)=""/4096) r2 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001300), &(0x7f0000001340)=0x0) syz_io_uring_setup(0x3eda, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_submit(0x0, r3, &(0x7f0000001280)=@IORING_OP_WRITEV={0x2, 0x3, 0x0, @fd=r2, 0x792, &(0x7f0000001240)=[{&(0x7f0000000080)}], 0x1, 0x1e, 0x1, {0x3}}, 0x9) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000000)=0x2) 01:50:49 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0) [ 839.593030][ T8323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 839.593142][ T8323] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 839.593284][ T8323] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 839.593420][ T8323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.597248][ T8323] usb 2-1: config 0 descriptor?? 01:50:52 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 01:50:52 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x570, &(0x7f00000001c0), &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000000c0)) 01:50:52 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:52 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)) 01:50:52 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) 01:50:52 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) [ 840.027854][T12847] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 841.958301][ T8323] usb 2-1: USB disconnect, device number 5 01:50:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) [ 842.132951][T12861] exFAT-fs (loop4): invalid boot record signature [ 842.133026][T12861] exFAT-fs (loop4): failed to read boot sector [ 842.133090][T12861] exFAT-fs (loop4): failed to recognize exfat type 01:50:52 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) 01:50:52 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:52 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001540)={&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev}, 0x1c, 0x0}, 0x0) 01:50:52 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xf) [ 842.805728][T12872] exFAT-fs (loop4): invalid boot record signature [ 842.805807][T12872] exFAT-fs (loop4): failed to read boot sector [ 842.805871][T12872] exFAT-fs (loop4): failed to recognize exfat type 01:50:53 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001540)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, 0x0}, 0x0) 01:50:53 executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0xc, 0x0, 0x0) 01:50:53 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) 01:50:53 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0}, 0x0) 01:50:53 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:53 executing program 5: syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm={0x15}, @mdlm={0x15}]}}}]}}]}}, 0x0) 01:50:53 executing program 2: mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000400)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='./bus/file0\x00') 01:50:53 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', 0x0}) [ 843.378780][T12884] exFAT-fs (loop4): invalid boot record signature [ 843.378857][T12884] exFAT-fs (loop4): failed to read boot sector [ 843.378920][T12884] exFAT-fs (loop4): failed to recognize exfat type 01:50:53 executing program 3: readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/245, 0xf5}, {&(0x7f0000000100)=""/229, 0xe5}, {&(0x7f0000000200)=""/53, 0xfffffffffffffe81}, {&(0x7f0000000240)=""/97, 0x61}], 0x4) 01:50:53 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) 01:50:53 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 843.622561][ T26] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 843.837749][T12889] overlayfs: failed to resolve './file0': -2 [ 843.865515][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 843.882039][T12896] exFAT-fs (loop4): invalid boot record signature [ 843.882113][T12896] exFAT-fs (loop4): failed to read boot sector [ 843.882622][T12896] exFAT-fs (loop4): failed to recognize exfat type 01:50:54 executing program 3: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x3, 0x90, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x0, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x81, 0x3f, 0xfd}, 0x0, 0x0, 0x2, [{0x2, &(0x7f0000000540)=@string={0x2}}, {0x0, 0x0}]}) 01:50:54 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001540)={&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev}, 0x1c, &(0x7f00000014c0)=[{0x0}, {0x0}], 0x2}, 0x0) 01:50:54 executing program 4: syz_mount_image$exfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) [ 843.993202][ T26] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 01:50:54 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 844.153390][ T26] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 844.153532][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.153640][ T26] usb 6-1: Product: syz [ 844.153726][ T26] usb 6-1: Manufacturer: syz [ 844.153810][ T26] usb 6-1: SerialNumber: syz 01:50:54 executing program 1: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0xf, &(0x7f0000000040), 0xc) [ 844.223503][ T26] usb 6-1: bad CDC descriptors [ 844.427629][ T26] usb 6-1: USB disconnect, device number 12 [ 844.772755][ T8323] usb 4-1: new high-speed USB device number 4 using dummy_hcd 01:50:55 executing program 2: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000440)) 01:50:55 executing program 4: syz_mount_image$exfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) 01:50:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='x'], 0x14}}, 0x0) 01:50:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) recvfrom$inet6(r0, 0x0, 0xffffffffffffff83, 0x40012000, 0x0, 0x0) 01:50:55 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 845.014840][ T8323] usb 4-1: Using ep0 maxpacket: 8 01:50:55 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001540)={&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000000100)="5b75c72495beee2b21319ea8f9ccc35be09d84e9f5b21a888c9c5ef9930550b4a1d8695a99512db9082c94babdb2e36007501469b73cd16413a5d53ed4a5fa2c290ecc8a1dda24c29c42cbf0c0bb2a3634d2200c4488723553ff8a3f169e648a0b2345d420109d37", 0x68}, {&(0x7f0000000180)="81ecfbf6", 0x4}, {&(0x7f00000001c0)="0bb2b1e88a5266ccdf60d983f3cc1cc29f380289dc8f6b2c1258e944efffdf5636715dc22265b8a177eef2d59807eca1a5fa790540626a9d9dd3248be9789d74f8de29d758a52f358f6e166a8c8ecad3fa8885026c0b227febc144a54aef7ef79fbedfddcbe850c25e81d99e0af69586911c171715d5c534a5d5fa87a7988de78820ded807b106c0cd3da5ed8626bfca7a3772eee7a4b14d49bfc27475340ae70c8e8859379cbdd8f136b55aeb1ad22afa768dbcb5943f103ad85ec9323775b6c4e62c5c401b106f891cafaebb9c8abb852e7ca1e104b6acc1c4bca1f5e6483fc85adb81b0fbf0d67a51b23f05ad936fabb8689a7da27bd87c4dac5df81b9e037974269a7b9501b63de16187ae9bac447fcf74d5f65fbaae64aeb3c8985d6ec307c6d5ab91a1d0d9b4ab0b22bb2bb77fe614b04e250982f7f43ffe96d3858a9b87c89449708acc7f830a6a3f22ec4837384cecd2db64ba4fa636ca7b060d2df536aee27e6e5b19c24b9629d6cfbdc71778c9c17a0e41fc4b4fd7014eebc0502d91a3b295532ff423fe7ab6cd37123d3f093310c628dd97e6502e337a4e51f43183ceed3a866c5f34a9c555ceaf85bd3715b6165a44b589291894552db9639d02f985083522697302c18ce1eb7ccb45078dfe9ef0d6b27f1ff0bcab32c5dc6724771891f91254c66e0acf22670a505b0f645e19caacd12c8e7f741d759be54b1858a16b82220a3fd9d10f52fc119af3085e12c6545383c29670fb9345e7b5ebc0ae370b4539090590ed3854adf5c26c3b4d24a1fa6e2de49bca74673658f0fdd78b2a9c238478080d370add6221dfa8d070a7d831809a39d0007006615e7fe554eae9357725413099b07fb9bd4823d0cd2d3937be0dda882c1b34db19d5ae14fe88d58be4e0c7e3733941ad9a56d861f6280aa8f2f7becc92f622069f46d487351d320b696b571326546698c0081925eeb908d15946a9eb4af6ed6a9fbe2d7c5cf5f494e1439577e8abf1335f234fea2e1e119d1e0ae79e18d7bb1488840ab2ce276bd6a5a1dd734c5c95aa325985a7e25be907789dc4a2102dcc44979c1438689dedb7506669aa1ec534cf09906d0f458ee65d2117611a7ab230d884348651b8ee8a6e066f64f34cb21faa4ee1717171ee2ad9ec4af0b6c755a9da49933d02349529a651f55e045fec7cb46ce4ec5fa990f3c41ac6ff51855ae368d67dc0e32145964254c7825077b162f7b4fc0ac464235ebf2bd7e0f094486347521bb6e6d79403e5c960ddb33cd7265797448c2efa123924b1ed62bed7b338d88120e073e8bebc54187dc33d509c6162298c8f0cbf810a04e7cd26a7b95d1fe29fce350e5c9d9b863fb55f6b36e120c4395d8544f426b76fa32240e0c6c0ad3f1e1f747d7bd2d0a6f04dfe0b9d938e894b9bc149bb013832fe8338c3c37a9010f8844db62ab148238de5fcf94cd5839bf31c594c4d1eb348fc05f093c2b21b61896c2d6f09ca971b808a8a64db06931c55507a8edeb68c7a45b8ef83e3095e52702a4995e88a7f23ec41105ec0967711e599ef4c6793aef3522322ed84d409f14f522f05b84bfb76e72405d92395ace0797071c841340bea96d88a18c17345a7de6ae8ca739c2fa4f835dc70decc9c113d1587f134fc35fe53f745787db13e5db0884264b925af5ca929f66ff6e2919bfa61c8b1e49097eed5b3b7943ec0a3c3c0a971e3f6a9b7812a28fdc0573816dc2ac29e023c95d45a94193d8b866bbd3999e87183cdcab19c4f6a05b41a076d4896f6816aa5857ac29dae1a9102c0992dd02022f767ee0da29d56965f172913501811a93b703382a26936d047ef3a4023592198b64242b3948b917dd83fb3e57a85d9565c8e1a67b5256829a33b971b1ca05f0248b64a8d321b222c3be079b391abf5d12cf0d291f8c1b0e4208c8ddb0fadf9d258ea544bff59bccd40b3b8a31382bd6275949ea91c8d493f808b546e311500c129b6cba3115afacbd7cbe01d93894fdb59b99d761ceee8eba3c687a7e6a57b17bb875da286f3b2fca464f965aa429de8ecf4ade9c922a87b7bc9da4a6719ba44eaf67bd2ebb657032e46a0b757bfcb6dd6075568e2580a199208bb8068f7e0a97596407b9ebb71cc7a63adc2547e26166b9506ef628ab128dc6752e0ee68776a6a2962da934061ec6a2e6422c2ba5f2de27871f3f470c4fe4fbc360bb21e4e2005d80cbac158c9a207290ffe7a80df658ddcfab156b7cb724399ecf3039afa56d12f5ec158032473c636c92166b862a9be4aef7c8cb554e5efb67089ac15f8acfcde39f61edebea930f60f28cf2b07461f769e9c470549508ff3cf1a2d7fb02c6b402bb929a718ad1b871f70c3818f8fa0e04346e8ca497eaee02a338dbed2e5c4e339c1625eff47ab393d998c8095c77e4f3550f5a916a080796eebb4fc71a2a138ef23d1ee28819e1175bac4d88a82851e026668c34170c5a28b4795c1a795e07337fa6118357bf85ea5ccbe7d7fd2de72cc3ecf9500e94a2ba10b73ddc18ad0904562988c80211fbff8eddb4f31284efac051af47f7f62b2bd127e36b2c43248c30f31d1d6e845688d3133675bc515d9bad664edb96552973e6499862f16233578e9601c0bc7f8c4b06348afa1b65fc57a9215f071db57586cff7f187da5910ad57911ae24bb4fd19cac1a1bebe341c3060db6054ae05996a363282f0c4be88622a3328d982228f43d849a006d60dbb86a8e1df92d1bbe9b2a23c112384d745ea6d75610af6855e2894bbdf8390ffd697743183134320d338154c478652edb2d39a34aab1775754381d816e725ee73640e10cb11b2ea80df27fa6cfc59ab43951c214c0638e183ca5bf1fd0e59d014e7eea54e84a03d84180068b7239953a593b1452328191a54e44914c4d10c5ad7e7e7a0f854007fceaf90a5f0695941b1fc9cdac08074b253dcbe228e6afd8024b79f5124c2737008d11093c0b171f32e89d164b22bfa710b9d6363bc7be795df83946f121b3e999e7df2cf59d0164868e5f313d61c1f388e3d9a991b251b4bdd282a04b02dee19b7134257cdff0dec30d28ea22342af7b62fa969b0b26256519b831481eaf44bc5bb7c36dce49a5da73c194700e4030597f1b3d409f474cd43213466f92ab6efe63ccfb140d1d7308ddd0f8d931041bd7316e361e4784fcc72645170e23af302074a23534a011e9eca2762fa0bb4c9c949302c6343285f543a947c97aade0ae13df966d94ddda3cb62e487404cb2e891af127f19920b0701138a8f8c0afc4822111fbd2f4549bfb267e66ea14cfeadc2a60d60b3ce3791181a3a212f366f4a7710c8c91378e98e44b9768374562a81a32f5f32dec7b98ae9fda5b4dbe5e123a9f13c5ae2a91888484aed3e9bde7ea1d40858dfcd0745ce2ab3814fb1e18458b71eb3b4018dfdde95d8490275bd697062372444485bf29c413b5fba8f39fdca80202a15f20113a4c589a82a1a1542a774d811c2b1c1d7ffff5affe63ba70702b87b1dc1aac690cecdddf079c681dc766aed00069053fe900c4dbd3eebeee8bf4756de4c15e4d43c0d55d48e8498bbbc16914a226df351d72b5a51cf44d99d8585b2fcd2687566ac36992401f2f9b5d5903f658d22b8d16ea3a1f959b9c360f60865e827cc60185ef4b3e725c336bc73a0764a3c3f9eb7a8a6e9a7c77b53672c56cf998d068393d145516bfc35f099fe63b3b687e8e45e878f933860d75da02e59e4af65be50004fc54339b9070e6773c8f835cda72fb9de36c7c8684d201e869ebe01623fd39cd9ea497c4efbbae8d07ef5ea96dce73cd6e1e1523e15c2e5a070ef492d80537211cf29d97506b1f9a5da39f76051babf8d01bdc2ef1b3bc82b405bb73db74ec23b868db931239c68fb8b9b55c7535d17448b9f5f90c5c85fbd12dc2125836f", 0xada}, {&(0x7f00000012c0)="ed", 0x1}, {&(0x7f0000001300)='}\\', 0x2}], 0x5}, 0x0) [ 845.136139][ T8323] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 01:50:55 executing program 4: syz_mount_image$exfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) [ 845.174107][ T8323] usb 4-1: language id specifier not provided by device, defaulting to English [ 845.492786][ T8323] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 845.492927][ T8323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.493143][ T8323] usb 4-1: Product: syz [ 845.493226][ T8323] usb 4-1: SerialNumber: syz [ 845.806272][ T8323] usb 4-1: USB disconnect, device number 4 01:50:56 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) 01:50:56 executing program 2: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x14, 0x1}, 0x4c}}, 0x0) 01:50:56 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:56 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0xa0d00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)) ioctl$TCFLSH(0xffffffffffffffff, 0x8910, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCGETS2(0xffffffffffffffff, 0x802c542a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xc7) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 01:50:56 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001540)={&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xfffffffd}, 0x1c, &(0x7f00000014c0)=[{0x0}, {0x0}], 0x2}, 0x0) 01:50:56 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) 01:50:56 executing program 2: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/170, 0xaa}], 0x1, 0x7fffffff, 0x0) 01:50:56 executing program 1: syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x7, 0x1, 0x3, 0x94, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x0, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x9}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x8, 0xff, 0x0, 0x20, 0x1}, 0x0, 0x0, 0x4, [{0x72, &(0x7f0000000400)=@string={0x72, 0x3, "b0795e18807ca5f524853ab44c9f175cb817e5461bd6d40db2b1cc3f9f2baf1407abb0bf0bfc14d6ee52eb1d3be88a18b7f556581d15c56702ecfecdfd0646c048f21caeb548c7af21e495fdf0178a0d0382e9e62c104fa9d4fee8d132c47decbdd74f19e26769a64853805660304dcc"}}, {0x0, 0x0}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x426}}]}) 01:50:56 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) 01:50:56 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:56 executing program 5: syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x81, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x3, 0x94, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x2, 0x8, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x7, 0x9}}]}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x0, 0x8, 0x0, 0x8, 0x20, 0x1}, 0xc7, &(0x7f0000000240)={0x5, 0xf, 0xc7, 0x2, [@generic={0xb7, 0x10, 0x0, "dc62345531d82d70edcbf9e2623bc066cbf65213a8768cff08e96d0e856a0c79c9a8f79076ae1d4e549ab44d2c799498f3d9954086c7d3814eca7284e9804ac5a3b550651519dad812169139b7491288fabcca5670bbb6908f46d0e49836e7817533be91ad7b359c0cf1913e5ed2ae8a0e72aabf160380b96ab657f9aba9e1bb9fa49df9f9f45ed40e98e319015fe1bd9f7521910826c8c37843e3adbaf8d9e2518ee9a54ffa951c3671b1a33f1ac4daae1eaf1f"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x20, 0x2, 0x0, 0x0, 0x5}]}, 0x4, [{0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4}}, {0x4, &(0x7f0000000580)=@lang_id={0x4}}]}) 01:50:56 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$inet6(r0, 0x0, 0x0, 0xc00) 01:50:56 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="03"], 0x4c}}, 0x0) 01:50:56 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), 0x0, 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) [ 846.915523][T12947] Error: Driver 'raw-gadget' is already registered, aborting... [ 846.915577][T12947] UDC core: USB Raw Gadget: driver registration failed: -16 [ 846.915658][T12947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 01:50:57 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x0) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 847.062637][T12730] usb 2-1: new high-speed USB device number 6 using dummy_hcd 01:50:57 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x8, 0x11}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, 0x0, 0x0}, 0x20) 01:50:57 executing program 2: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x1f, 0x2, 0x7, 0x1, 0x0, 0x6, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x0, 0x4}}}}}]}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x55, &(0x7f0000000540)=@string={0x55, 0x3, "7c7332a7c4243122e83c7602392390b7e8e2f2505b0694eaf1cd320f084be2aab0e56df879cf76cc3f3d161cea43646274f0f7e860298c83cc27addf0e3da2394377e3eec1b55b7c95860a09f581ab0837c2f6"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x1007}}]}) [ 847.302571][T12730] usb 2-1: Using ep0 maxpacket: 32 01:50:57 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) [ 847.423131][T12730] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x82 has invalid wMaxPacketSize 0 [ 847.423268][T12730] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 0 [ 847.423404][T12730] usb 2-1: config 1 interface 0 has no altsetting 0 01:50:57 executing program 5: landlock_create_ruleset(&(0x7f0000000000)={0x4}, 0x8, 0x0) [ 847.783504][T12730] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 847.783643][T12730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.783750][T12730] usb 2-1: Product: Ð [ 847.783835][T12730] usb 2-1: SerialNumber: Ц [ 848.089298][T12730] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 9 proto 3 vid 0x0525 pid 0xA4A8 [ 848.105761][T12730] usb 2-1: USB disconnect, device number 6 [ 848.111510][T12730] usblp0: removed [ 848.146807][T12439] udevd[12439]: setting owner of /dev/bus/usb/002/006 to uid=0, gid=7 failed: No such file or directory 01:50:58 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001540)={&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c, 0x0}, 0x0) 01:50:58 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:58 executing program 3: socketpair(0x22, 0x0, 0x0, &(0x7f00000001c0)) 01:50:58 executing program 5: landlock_create_ruleset(&(0x7f0000000000)={0x4}, 0x8, 0x0) 01:50:58 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) 01:50:58 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000080)=0x1e) 01:50:58 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x18}, 0x0) 01:50:58 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001740)={[{@discard}, {@errors_continue}]}) 01:50:58 executing program 5: landlock_create_ruleset(&(0x7f0000000000)={0x4}, 0x8, 0x0) 01:50:58 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open(&(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x808241, 0x0) fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0xee01, r2) syz_fuse_handle_req(r0, &(0x7f0000008800)="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", 0x2000, &(0x7f0000000e40)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x24, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 01:50:58 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:59 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r0, &(0x7f0000000280), 0x2, 0x0) 01:50:59 executing program 2: syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1, 0x1}}]}}]}}, 0x0) 01:50:59 executing program 5: landlock_create_ruleset(&(0x7f0000000000)={0x4}, 0x8, 0x0) 01:50:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000001900)) 01:50:59 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0) 01:50:59 executing program 1: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r1) socket$inet6(0xa, 0x0, 0x9) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(0xffffffffffffffff) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) 01:50:59 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:50:59 executing program 5: landlock_create_ruleset(0x0, 0x0, 0x0) 01:50:59 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0) 01:50:59 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000900)=""/4096, &(0x7f0000001900)=0x1000) 01:51:00 executing program 5: landlock_create_ruleset(0x0, 0x0, 0x0) 01:51:00 executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x0, 0x0) r1 = dup(0xffffffffffffffff) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000004d80)=[{{0x0, 0xfffffdef, 0x0, 0x0, 0x0, 0x0, 0xffffffe0}, 0x4000000}], 0xaa, 0x0) 01:51:00 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:00 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, 0x0) 01:51:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000480)) 01:51:00 executing program 5: landlock_create_ruleset(0x0, 0x0, 0x0) 01:51:00 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:01 executing program 1: add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000a00)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) 01:51:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x0) 01:51:01 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)={[{@discard}]}) 01:51:01 executing program 5: landlock_create_ruleset(&(0x7f0000000000), 0x8, 0x0) 01:51:01 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:01 executing program 3: socketpair(0x11, 0x2, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffe) request_key(&(0x7f0000000d80)='asymmetric\x00', &(0x7f0000000dc0)={'syz', 0x3}, &(0x7f0000000e00)='nl80211\x00', 0x0) [ 851.316729][T13028] exFAT-fs (loop4): invalid boot record signature [ 851.316813][T13028] exFAT-fs (loop4): failed to read boot sector [ 851.316876][T13028] exFAT-fs (loop4): failed to recognize exfat type 01:51:01 executing program 2: syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x400) 01:51:01 executing program 5: landlock_create_ruleset(&(0x7f0000000000), 0x8, 0x0) 01:51:01 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)) 01:51:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) [ 851.808622][T13038] exFAT-fs (loop4): invalid boot record signature [ 851.808705][T13038] exFAT-fs (loop4): failed to read boot sector [ 851.808770][T13038] exFAT-fs (loop4): failed to recognize exfat type 01:51:01 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), 0xffffffffffffffff) 01:51:02 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:02 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)) 01:51:02 executing program 5: landlock_create_ruleset(&(0x7f0000000000), 0x8, 0x0) 01:51:02 executing program 2: add_key$fscrypt_v1(&(0x7f00000009c0), 0x0, &(0x7f0000000a40)={0x0, "e8580ad9099ffe9922f4265778b0dab062ce8ffff47094502cf4c2e2e9e24d762b0f486f0ecd4d364995d9d7ad1a72382ab6bc09c0099d39e04966e586144f0b"}, 0x48, 0x0) 01:51:02 executing program 1: syz_open_dev$dri(&(0x7f00000008c0), 0x100000000, 0x400) 01:51:02 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x1b, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0x85, &(0x7f0000000100)=""/133, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) [ 852.326500][T13049] exFAT-fs (loop4): invalid boot record signature [ 852.326598][T13049] exFAT-fs (loop4): failed to read boot sector [ 852.326664][T13049] exFAT-fs (loop4): failed to recognize exfat type 01:51:02 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000480)) 01:51:02 executing program 4: syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000001680), 0x0, &(0x7f0000001740)) 01:51:02 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:02 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) socket$l2tp6(0xa, 0x2, 0x73) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x1) 01:51:02 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 01:51:02 executing program 3: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1000, 0x103) creat(&(0x7f0000000300)='./file1\x00', 0x0) openat$dir(0xffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 01:51:03 executing program 5: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000200)) [ 852.967474][T13061] exFAT-fs (loop4): invalid boot record signature [ 852.967550][T13061] exFAT-fs (loop4): failed to read boot sector [ 852.967614][T13061] exFAT-fs (loop4): failed to recognize exfat type 01:51:03 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x0) 01:51:03 executing program 1: syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e902dc20402090b96963010203010902120001000000000904170000"], 0x0) 01:51:03 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:03 executing program 3: openat$mixer(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 01:51:03 executing program 4: syz_clone(0x44b00700, 0x0, 0x0, 0x0, 0x0, 0x0) 01:51:03 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) 01:51:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 01:51:03 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x4207, r0) 01:51:03 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 853.873402][T12730] usb 2-1: new high-speed USB device number 7 using dummy_hcd 01:51:04 executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f0000000140)={r0, &(0x7f0000000200), 0x0}, 0x20) [ 854.122854][T12730] usb 2-1: Using ep0 maxpacket: 32 01:51:04 executing program 5: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, &(0x7f0000001900)) socketpair(0x2b, 0x0, 0x0, &(0x7f0000001b40)) 01:51:04 executing program 4: socketpair(0x11, 0x2, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) add_key$fscrypt_provisioning(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x2}, &(0x7f0000000440)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffe) request_key(&(0x7f0000000600)='ceph\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000680)='\xcc:.(+*\x00', 0xfffffffffffffffe) add_key(&(0x7f0000000ac0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, 0x0) request_key(&(0x7f0000000d80)='asymmetric\x00', &(0x7f0000000dc0)={'syz', 0x3}, &(0x7f0000000e00)='nl80211\x00', 0x0) [ 854.243224][T12730] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 854.243340][T12730] usb 2-1: config 0 has no interface number 0 01:51:04 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 854.404325][T12730] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=63.69 [ 854.404469][T12730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.404577][T12730] usb 2-1: Product: syz [ 854.404662][T12730] usb 2-1: Manufacturer: syz [ 854.404753][T12730] usb 2-1: SerialNumber: syz [ 854.408593][T12730] usb 2-1: config 0 descriptor?? [ 854.450351][T12730] smsusb:smsusb_probe: board id=8, interface number 23 [ 854.648701][ T8323] usb 2-1: USB disconnect, device number 7 01:51:05 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) statx(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000bc0)) 01:51:05 executing program 3: r0 = syz_usb_connect(0x0, 0x9a, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000d2f7203116006261d00102030109024b0001000000000904fb"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 01:51:05 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, 0x0) 01:51:05 executing program 5: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x800) 01:51:05 executing program 4: request_key(&(0x7f0000000600)='ceph\x00', 0x0, 0x0, 0xfffffffffffffffe) 01:51:05 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:05 executing program 5: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x800) 01:51:05 executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x30, 0x0, 0x0) 01:51:05 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:05 executing program 2: r0 = syz_open_dev$dri(&(0x7f00000004c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000540)) [ 855.553087][T12730] usb 4-1: new high-speed USB device number 5 using dummy_hcd 01:51:05 executing program 1: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000140)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x404c081) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x40000c0) syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) [ 855.792921][T12730] usb 4-1: Using ep0 maxpacket: 32 01:51:05 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) 01:51:06 executing program 2: add_key(&(0x7f0000000ac0)='pkcs7_test\x00', 0x0, &(0x7f0000000b40)="bf3b", 0x2, 0xfffffffffffffffc) [ 855.913029][T12730] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 855.913159][T12730] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 855.913261][T12730] usb 4-1: config 0 has no interface number 0 [ 856.074135][T12730] usb 4-1: New USB device found, idVendor=1631, idProduct=6200, bcdDevice=d0.61 [ 856.074366][T12730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.074474][T12730] usb 4-1: Product: syz [ 856.074560][T12730] usb 4-1: Manufacturer: syz [ 856.074643][T12730] usb 4-1: SerialNumber: syz [ 856.079005][T12730] usb 4-1: config 0 descriptor?? [ 856.542713][T12730] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 856.543029][T12730] asix: probe of 4-1:0.251 failed with error -71 [ 856.571209][T12730] usb 4-1: USB disconnect, device number 5 01:51:07 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0xfffffffc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000440)=ANY=[], 0x88) sendfile(r2, r2, &(0x7f0000000240), 0x7ffc) sendfile(r2, 0xffffffffffffffff, 0x0, 0x7fff) 01:51:07 executing program 5: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x800) 01:51:07 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) fcntl$getownex(r3, 0x10, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) sched_setattr(0x0, &(0x7f0000000040)={0x38}, 0x0) syz_clone3(&(0x7f0000000a00)={0x40b86000, 0x0, 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001140)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x80) 01:51:07 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) 01:51:07 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000c40)) 01:51:07 executing program 5: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x800) 01:51:07 executing program 2: syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:51:07 executing program 1: sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) 01:51:07 executing program 5: faccessat2(0xffffffffffffffff, 0x0, 0x0, 0x0) 01:51:07 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:08 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) 01:51:08 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000440)=ANY=[], 0x88) sendfile(r3, r2, 0x0, 0x7fff) ptrace(0xffffffffffffffff, 0x0) 01:51:08 executing program 1: r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x10000840) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x14000408) 01:51:08 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000004440), 0x2) write$cgroup_subtree(r0, 0x0, 0x0) [ 858.928554][T13140] not chained 550000 origins [ 858.928580][T13140] CPU: 0 PID: 13140 Comm: syz-executor.4 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 858.928632][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 858.928657][T13140] Call Trace: [ 858.928671][T13140] [ 858.928684][T13140] dump_stack_lvl+0x1c8/0x256 [ 858.928760][T13140] dump_stack+0x1a/0x1c [ 858.928813][T13140] kmsan_internal_chain_origin+0x78/0x120 [ 858.928867][T13140] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 858.928921][T13140] ? kmsan_get_metadata+0x33/0x220 [ 858.928971][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 858.929028][T13140] ? kmsan_get_metadata+0x33/0x220 [ 858.929077][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 858.929137][T13140] ? __get_compat_msghdr+0x5b/0x750 [ 858.929235][T13140] ? kmsan_get_metadata+0x33/0x220 [ 858.929292][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 858.929397][T13140] ? should_fail+0x3f/0x810 [ 858.929456][T13140] ? __stack_depot_save+0x21/0x4b0 [ 858.929513][T13140] ? kmsan_get_metadata+0x33/0x220 [ 858.929564][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 858.929625][T13140] ? kmsan_get_metadata+0x33/0x220 [ 858.929677][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 858.929745][T13140] __msan_chain_origin+0xbd/0x140 [ 858.929796][T13140] __get_compat_msghdr+0x514/0x750 [ 858.929871][T13140] get_compat_msghdr+0x8c/0x1c0 [ 858.929934][T13140] ? ___sys_recvmsg+0xa9/0x870 [ 858.929976][T13140] ? do_recvmmsg+0x63a/0x10a0 [ 858.930021][T13140] ___sys_recvmsg+0x19d/0x870 [ 858.930069][T13140] ? __schedule+0x1609/0x21d0 [ 858.930115][T13140] ? kmsan_get_metadata+0x33/0x220 [ 858.930164][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 858.930218][T13140] ? kmsan_get_metadata+0x33/0x220 [ 858.930268][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 858.930325][T13140] do_recvmmsg+0x63a/0x10a0 [ 858.930378][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 858.930436][T13140] ? __sys_recvmmsg+0x52/0x450 [ 858.930477][T13140] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.930531][T13140] __sys_recvmmsg+0x113/0x450 [ 858.930573][T13140] ? kmsan_get_metadata+0x33/0x220 [ 858.930628][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.930685][T13140] __do_fast_syscall_32+0x95/0xf0 [ 858.930732][T13140] ? exit_to_user_mode_prepare+0x119/0x220 [ 858.930789][T13140] do_fast_syscall_32+0x33/0x70 [ 858.930832][T13140] do_SYSENTER_32+0x1b/0x20 [ 858.930873][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 858.930940][T13140] RIP: 0023:0xf7f64549 [ 858.930970][T13140] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 858.931017][T13140] RSP: 002b:00000000f7f3e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 858.931060][T13140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 858.931090][T13140] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 858.931117][T13140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 858.931143][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 858.931169][T13140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 858.931208][T13140] [ 858.931369][T13140] Uninit was stored to memory at: [ 858.931434][T13140] __get_compat_msghdr+0x514/0x750 [ 858.931494][T13140] get_compat_msghdr+0x8c/0x1c0 [ 858.931552][T13140] ___sys_recvmsg+0x19d/0x870 [ 858.931591][T13140] do_recvmmsg+0x63a/0x10a0 [ 858.931629][T13140] __sys_recvmmsg+0x113/0x450 [ 858.931668][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.931722][T13140] __do_fast_syscall_32+0x95/0xf0 [ 858.931763][T13140] do_fast_syscall_32+0x33/0x70 [ 858.931802][T13140] do_SYSENTER_32+0x1b/0x20 [ 858.931840][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 858.931904][T13140] [ 858.931912][T13140] Uninit was stored to memory at: [ 858.931975][T13140] __get_compat_msghdr+0x514/0x750 [ 858.932033][T13140] get_compat_msghdr+0x8c/0x1c0 [ 858.932089][T13140] ___sys_recvmsg+0x19d/0x870 [ 858.932128][T13140] do_recvmmsg+0x63a/0x10a0 [ 858.932416][T13140] __sys_recvmmsg+0x113/0x450 [ 858.932458][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.932504][T13140] __do_fast_syscall_32+0x95/0xf0 [ 858.932543][T13140] do_fast_syscall_32+0x33/0x70 [ 858.932580][T13140] do_SYSENTER_32+0x1b/0x20 [ 858.932617][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 858.932682][T13140] [ 858.932689][T13140] Uninit was stored to memory at: [ 858.932758][T13140] __get_compat_msghdr+0x514/0x750 [ 858.932817][T13140] get_compat_msghdr+0x8c/0x1c0 [ 858.932874][T13140] ___sys_recvmsg+0x19d/0x870 [ 858.932913][T13140] do_recvmmsg+0x63a/0x10a0 [ 858.932952][T13140] __sys_recvmmsg+0x113/0x450 [ 858.932992][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.933040][T13140] __do_fast_syscall_32+0x95/0xf0 [ 858.933081][T13140] do_fast_syscall_32+0x33/0x70 [ 858.933121][T13140] do_SYSENTER_32+0x1b/0x20 [ 858.933159][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 858.933226][T13140] [ 858.933233][T13140] Uninit was stored to memory at: [ 858.933296][T13140] __get_compat_msghdr+0x514/0x750 [ 858.933356][T13140] get_compat_msghdr+0x8c/0x1c0 [ 858.933415][T13140] ___sys_recvmsg+0x19d/0x870 [ 858.933455][T13140] do_recvmmsg+0x63a/0x10a0 [ 858.933493][T13140] __sys_recvmmsg+0x113/0x450 [ 858.933533][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.933581][T13140] __do_fast_syscall_32+0x95/0xf0 [ 858.933622][T13140] do_fast_syscall_32+0x33/0x70 [ 858.933662][T13140] do_SYSENTER_32+0x1b/0x20 [ 858.933700][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 858.933772][T13140] [ 858.933779][T13140] Uninit was stored to memory at: [ 858.933843][T13140] __get_compat_msghdr+0x514/0x750 [ 858.933902][T13140] get_compat_msghdr+0x8c/0x1c0 [ 858.933962][T13140] ___sys_recvmsg+0x19d/0x870 [ 858.934001][T13140] do_recvmmsg+0x63a/0x10a0 [ 858.934039][T13140] __sys_recvmmsg+0x113/0x450 [ 858.934079][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.934126][T13140] __do_fast_syscall_32+0x95/0xf0 [ 858.934167][T13140] do_fast_syscall_32+0x33/0x70 [ 858.934206][T13140] do_SYSENTER_32+0x1b/0x20 [ 858.934244][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 858.934310][T13140] [ 858.934317][T13140] Uninit was stored to memory at: [ 858.934380][T13140] __get_compat_msghdr+0x514/0x750 [ 858.934440][T13140] get_compat_msghdr+0x8c/0x1c0 [ 858.934498][T13140] ___sys_recvmsg+0x19d/0x870 [ 858.934538][T13140] do_recvmmsg+0x63a/0x10a0 [ 858.934577][T13140] __sys_recvmmsg+0x113/0x450 [ 858.934617][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.934664][T13140] __do_fast_syscall_32+0x95/0xf0 [ 858.934705][T13140] do_fast_syscall_32+0x33/0x70 [ 858.934749][T13140] do_SYSENTER_32+0x1b/0x20 [ 858.934787][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 858.934854][T13140] [ 858.934861][T13140] Uninit was stored to memory at: [ 858.934924][T13140] __get_compat_msghdr+0x514/0x750 [ 858.934984][T13140] get_compat_msghdr+0x8c/0x1c0 [ 858.935043][T13140] ___sys_recvmsg+0x19d/0x870 [ 858.935082][T13140] do_recvmmsg+0x63a/0x10a0 [ 858.935121][T13140] __sys_recvmmsg+0x113/0x450 [ 858.935161][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 858.935209][T13140] __do_fast_syscall_32+0x95/0xf0 [ 858.935250][T13140] do_fast_syscall_32+0x33/0x70 [ 858.935290][T13140] do_SYSENTER_32+0x1b/0x20 [ 858.935328][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 858.935395][T13140] [ 858.935402][T13140] Local variable msg_sys created at: [ 858.935416][T13140] do_recvmmsg+0x5f/0x10a0 [ 858.935453][T13140] __sys_recvmmsg+0x113/0x450 [ 859.966478][T13140] not chained 560000 origins [ 859.966503][T13140] CPU: 1 PID: 13140 Comm: syz-executor.4 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 859.966552][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 859.966577][T13140] Call Trace: [ 859.966590][T13140] [ 859.966604][T13140] dump_stack_lvl+0x1c8/0x256 [ 859.966674][T13140] dump_stack+0x1a/0x1c [ 859.966734][T13140] kmsan_internal_chain_origin+0x78/0x120 [ 859.966788][T13140] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 859.966843][T13140] ? kmsan_get_metadata+0x33/0x220 [ 859.966894][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 859.966951][T13140] ? kmsan_get_metadata+0x33/0x220 [ 859.967002][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 859.967060][T13140] ? __get_compat_msghdr+0x5b/0x750 [ 859.967126][T13140] ? kmsan_get_metadata+0x33/0x220 [ 859.967176][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 859.967233][T13140] ? should_fail+0x3f/0x810 [ 859.967284][T13140] ? __stack_depot_save+0x21/0x4b0 [ 859.967333][T13140] ? kmsan_get_metadata+0x33/0x220 [ 859.967383][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 859.967439][T13140] ? kmsan_get_metadata+0x33/0x220 [ 859.967488][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 859.967543][T13140] __msan_chain_origin+0xbd/0x140 [ 859.967593][T13140] __get_compat_msghdr+0x514/0x750 [ 859.967667][T13140] get_compat_msghdr+0x8c/0x1c0 [ 859.967733][T13140] ? ___sys_recvmsg+0xa9/0x870 [ 859.967774][T13140] ? do_recvmmsg+0x63a/0x10a0 [ 859.967818][T13140] ___sys_recvmsg+0x19d/0x870 [ 859.967865][T13140] ? __schedule+0x1609/0x21d0 [ 859.967911][T13140] ? kmsan_get_metadata+0x33/0x220 [ 859.967963][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 859.968017][T13140] ? kmsan_get_metadata+0x33/0x220 [ 859.968067][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 859.968124][T13140] do_recvmmsg+0x63a/0x10a0 [ 859.968176][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 859.968236][T13140] ? __sys_recvmmsg+0x52/0x450 [ 859.968278][T13140] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.968330][T13140] __sys_recvmmsg+0x113/0x450 [ 859.968371][T13140] ? kmsan_get_metadata+0x33/0x220 [ 859.968427][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.968485][T13140] __do_fast_syscall_32+0x95/0xf0 [ 859.968528][T13140] ? exit_to_user_mode_prepare+0x119/0x220 [ 859.968579][T13140] do_fast_syscall_32+0x33/0x70 [ 859.968621][T13140] do_SYSENTER_32+0x1b/0x20 [ 859.968661][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 859.968735][T13140] RIP: 0023:0xf7f64549 [ 859.968766][T13140] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 859.968810][T13140] RSP: 002b:00000000f7f3e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 859.968852][T13140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 859.968884][T13140] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 859.968911][T13140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 859.968938][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 859.968965][T13140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 859.969003][T13140] [ 859.969016][T13140] Uninit was stored to memory at: [ 859.969079][T13140] __get_compat_msghdr+0x514/0x750 [ 859.969140][T13140] get_compat_msghdr+0x8c/0x1c0 [ 859.969198][T13140] ___sys_recvmsg+0x19d/0x870 [ 859.969237][T13140] do_recvmmsg+0x63a/0x10a0 [ 859.969276][T13140] __sys_recvmmsg+0x113/0x450 [ 859.969316][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.969364][T13140] __do_fast_syscall_32+0x95/0xf0 [ 859.969404][T13140] do_fast_syscall_32+0x33/0x70 [ 859.969443][T13140] do_SYSENTER_32+0x1b/0x20 [ 859.969481][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 859.969547][T13140] [ 859.969554][T13140] Uninit was stored to memory at: [ 859.969617][T13140] __get_compat_msghdr+0x514/0x750 [ 859.969675][T13140] get_compat_msghdr+0x8c/0x1c0 [ 859.969738][T13140] ___sys_recvmsg+0x19d/0x870 [ 859.969777][T13140] do_recvmmsg+0x63a/0x10a0 [ 859.969816][T13140] __sys_recvmmsg+0x113/0x450 [ 859.969856][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.969904][T13140] __do_fast_syscall_32+0x95/0xf0 [ 859.969944][T13140] do_fast_syscall_32+0x33/0x70 [ 859.969984][T13140] do_SYSENTER_32+0x1b/0x20 [ 859.970021][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 859.970088][T13140] [ 859.970095][T13140] Uninit was stored to memory at: [ 859.970158][T13140] __get_compat_msghdr+0x514/0x750 [ 859.970217][T13140] get_compat_msghdr+0x8c/0x1c0 [ 859.970276][T13140] ___sys_recvmsg+0x19d/0x870 [ 859.970315][T13140] do_recvmmsg+0x63a/0x10a0 [ 859.970354][T13140] __sys_recvmmsg+0x113/0x450 [ 859.970394][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.970442][T13140] __do_fast_syscall_32+0x95/0xf0 [ 859.970482][T13140] do_fast_syscall_32+0x33/0x70 [ 859.970521][T13140] do_SYSENTER_32+0x1b/0x20 [ 859.970560][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 859.970626][T13140] [ 859.970632][T13140] Uninit was stored to memory at: [ 859.970699][T13140] __get_compat_msghdr+0x514/0x750 [ 859.970758][T13140] get_compat_msghdr+0x8c/0x1c0 [ 859.970817][T13140] ___sys_recvmsg+0x19d/0x870 [ 859.970856][T13140] do_recvmmsg+0x63a/0x10a0 [ 859.970894][T13140] __sys_recvmmsg+0x113/0x450 [ 859.970934][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.970982][T13140] __do_fast_syscall_32+0x95/0xf0 [ 859.971022][T13140] do_fast_syscall_32+0x33/0x70 [ 859.971062][T13140] do_SYSENTER_32+0x1b/0x20 [ 859.971100][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 859.971166][T13140] [ 859.971173][T13140] Uninit was stored to memory at: [ 859.971237][T13140] __get_compat_msghdr+0x514/0x750 [ 859.971296][T13140] get_compat_msghdr+0x8c/0x1c0 [ 859.971358][T13140] ___sys_recvmsg+0x19d/0x870 [ 859.971397][T13140] do_recvmmsg+0x63a/0x10a0 [ 859.971435][T13140] __sys_recvmmsg+0x113/0x450 [ 859.971474][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.971522][T13140] __do_fast_syscall_32+0x95/0xf0 [ 859.971563][T13140] do_fast_syscall_32+0x33/0x70 [ 859.971601][T13140] do_SYSENTER_32+0x1b/0x20 [ 859.971639][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 859.971709][T13140] [ 859.971715][T13140] Uninit was stored to memory at: [ 859.971778][T13140] __get_compat_msghdr+0x514/0x750 [ 859.971837][T13140] get_compat_msghdr+0x8c/0x1c0 [ 859.971895][T13140] ___sys_recvmsg+0x19d/0x870 [ 859.971934][T13140] do_recvmmsg+0x63a/0x10a0 [ 859.971972][T13140] __sys_recvmmsg+0x113/0x450 [ 859.972012][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.972060][T13140] __do_fast_syscall_32+0x95/0xf0 [ 859.972101][T13140] do_fast_syscall_32+0x33/0x70 [ 859.972140][T13140] do_SYSENTER_32+0x1b/0x20 [ 859.972566][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 859.972634][T13140] [ 859.972641][T13140] Uninit was stored to memory at: [ 859.972710][T13140] __get_compat_msghdr+0x514/0x750 [ 859.972770][T13140] get_compat_msghdr+0x8c/0x1c0 [ 859.972827][T13140] ___sys_recvmsg+0x19d/0x870 [ 859.972867][T13140] do_recvmmsg+0x63a/0x10a0 [ 859.972906][T13140] __sys_recvmmsg+0x113/0x450 [ 859.972945][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 859.972993][T13140] __do_fast_syscall_32+0x95/0xf0 [ 859.973034][T13140] do_fast_syscall_32+0x33/0x70 [ 859.973073][T13140] do_SYSENTER_32+0x1b/0x20 [ 859.973110][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 859.973176][T13140] [ 859.973184][T13140] Local variable msg_sys created at: [ 859.973197][T13140] do_recvmmsg+0x5f/0x10a0 [ 859.973234][T13140] __sys_recvmmsg+0x113/0x450 [ 860.480631][T13140] not chained 570000 origins [ 860.480654][T13140] CPU: 1 PID: 13140 Comm: syz-executor.4 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 860.480704][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 860.480730][T13140] Call Trace: [ 860.480744][T13140] [ 860.480758][T13140] dump_stack_lvl+0x1c8/0x256 [ 860.480831][T13140] dump_stack+0x1a/0x1c [ 860.480888][T13140] kmsan_internal_chain_origin+0x78/0x120 [ 860.480943][T13140] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 860.481001][T13140] ? kmsan_get_metadata+0x33/0x220 [ 860.481054][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 860.481114][T13140] ? kmsan_get_metadata+0x33/0x220 [ 860.481167][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 860.481234][T13140] ? __get_compat_msghdr+0x5b/0x750 [ 860.481301][T13140] ? kmsan_get_metadata+0x33/0x220 [ 860.481354][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 860.481415][T13140] ? should_fail+0x3f/0x810 [ 860.481469][T13140] ? __stack_depot_save+0x21/0x4b0 [ 860.481520][T13140] ? kmsan_get_metadata+0x33/0x220 [ 860.481573][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 860.481631][T13140] ? kmsan_get_metadata+0x33/0x220 [ 860.481684][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 860.481742][T13140] __msan_chain_origin+0xbd/0x140 [ 860.481795][T13140] __get_compat_msghdr+0x514/0x750 [ 860.481872][T13140] get_compat_msghdr+0x8c/0x1c0 [ 860.481937][T13140] ? ___sys_recvmsg+0xa9/0x870 [ 860.481981][T13140] ? do_recvmmsg+0x63a/0x10a0 [ 860.482028][T13140] ___sys_recvmsg+0x19d/0x870 [ 860.482076][T13140] ? __schedule+0x1609/0x21d0 [ 860.482125][T13140] ? kmsan_get_metadata+0x33/0x220 [ 860.482185][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 860.482244][T13140] ? kmsan_get_metadata+0x33/0x220 [ 860.482298][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 860.482360][T13140] do_recvmmsg+0x63a/0x10a0 [ 860.482417][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 860.482481][T13140] ? __sys_recvmmsg+0x52/0x450 [ 860.482525][T13140] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.482582][T13140] __sys_recvmmsg+0x113/0x450 [ 860.482627][T13140] ? kmsan_get_metadata+0x33/0x220 [ 860.482687][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.482749][T13140] __do_fast_syscall_32+0x95/0xf0 [ 860.482795][T13140] ? exit_to_user_mode_prepare+0x119/0x220 [ 860.482850][T13140] do_fast_syscall_32+0x33/0x70 [ 860.482895][T13140] do_SYSENTER_32+0x1b/0x20 [ 860.482939][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 860.483012][T13140] RIP: 0023:0xf7f64549 [ 860.483044][T13140] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 860.483089][T13140] RSP: 002b:00000000f7f3e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 860.483134][T13140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 860.483167][T13140] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 860.483233][T13140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 860.483260][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.483289][T13140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 860.483328][T13140] [ 860.483666][T13140] Uninit was stored to memory at: [ 860.483734][T13140] __get_compat_msghdr+0x514/0x750 [ 860.483798][T13140] get_compat_msghdr+0x8c/0x1c0 [ 860.483859][T13140] ___sys_recvmsg+0x19d/0x870 [ 860.483900][T13140] do_recvmmsg+0x63a/0x10a0 [ 860.483939][T13140] __sys_recvmmsg+0x113/0x450 [ 860.483981][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.484031][T13140] __do_fast_syscall_32+0x95/0xf0 [ 860.484074][T13140] do_fast_syscall_32+0x33/0x70 [ 860.484115][T13140] do_SYSENTER_32+0x1b/0x20 [ 860.484154][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 860.484229][T13140] [ 860.484236][T13140] Uninit was stored to memory at: [ 860.484306][T13140] __get_compat_msghdr+0x514/0x750 [ 860.484368][T13140] get_compat_msghdr+0x8c/0x1c0 [ 860.484429][T13140] ___sys_recvmsg+0x19d/0x870 [ 860.484470][T13140] do_recvmmsg+0x63a/0x10a0 [ 860.484510][T13140] __sys_recvmmsg+0x113/0x450 [ 860.484551][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.484601][T13140] __do_fast_syscall_32+0x95/0xf0 [ 860.484643][T13140] do_fast_syscall_32+0x33/0x70 [ 860.484681][T13140] do_SYSENTER_32+0x1b/0x20 [ 860.484720][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 860.484787][T13140] [ 860.484794][T13140] Uninit was stored to memory at: [ 860.484861][T13140] __get_compat_msghdr+0x514/0x750 [ 860.484942][T13140] get_compat_msghdr+0x8c/0x1c0 [ 860.485003][T13140] ___sys_recvmsg+0x19d/0x870 [ 860.485043][T13140] do_recvmmsg+0x63a/0x10a0 [ 860.485084][T13140] __sys_recvmmsg+0x113/0x450 [ 860.485125][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.485182][T13140] __do_fast_syscall_32+0x95/0xf0 [ 860.485224][T13140] do_fast_syscall_32+0x33/0x70 [ 860.485264][T13140] do_SYSENTER_32+0x1b/0x20 [ 860.485304][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 860.485373][T13140] [ 860.485380][T13140] Uninit was stored to memory at: [ 860.485445][T13140] __get_compat_msghdr+0x514/0x750 [ 860.485507][T13140] get_compat_msghdr+0x8c/0x1c0 [ 860.485568][T13140] ___sys_recvmsg+0x19d/0x870 [ 860.485609][T13140] do_recvmmsg+0x63a/0x10a0 [ 860.485648][T13140] __sys_recvmmsg+0x113/0x450 [ 860.485689][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.485739][T13140] __do_fast_syscall_32+0x95/0xf0 [ 860.485781][T13140] do_fast_syscall_32+0x33/0x70 [ 860.485822][T13140] do_SYSENTER_32+0x1b/0x20 [ 860.485861][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 860.485930][T13140] [ 860.485937][T13140] Uninit was stored to memory at: [ 860.486002][T13140] __get_compat_msghdr+0x514/0x750 [ 860.486064][T13140] get_compat_msghdr+0x8c/0x1c0 [ 860.486133][T13140] ___sys_recvmsg+0x19d/0x870 [ 860.486180][T13140] do_recvmmsg+0x63a/0x10a0 [ 860.486221][T13140] __sys_recvmmsg+0x113/0x450 [ 860.486264][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.486313][T13140] __do_fast_syscall_32+0x95/0xf0 [ 860.486354][T13140] do_fast_syscall_32+0x33/0x70 [ 860.486394][T13140] do_SYSENTER_32+0x1b/0x20 [ 860.486433][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 860.486502][T13140] [ 860.486509][T13140] Uninit was stored to memory at: [ 860.486574][T13140] __get_compat_msghdr+0x514/0x750 [ 860.486635][T13140] get_compat_msghdr+0x8c/0x1c0 [ 860.486696][T13140] ___sys_recvmsg+0x19d/0x870 [ 860.486736][T13140] do_recvmmsg+0x63a/0x10a0 [ 860.486776][T13140] __sys_recvmmsg+0x113/0x450 [ 860.486816][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.486865][T13140] __do_fast_syscall_32+0x95/0xf0 [ 860.486907][T13140] do_fast_syscall_32+0x33/0x70 [ 860.486947][T13140] do_SYSENTER_32+0x1b/0x20 [ 860.486987][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 860.487055][T13140] [ 860.487062][T13140] Uninit was stored to memory at: [ 860.487127][T13140] __get_compat_msghdr+0x514/0x750 [ 860.487193][T13140] get_compat_msghdr+0x8c/0x1c0 [ 860.487253][T13140] ___sys_recvmsg+0x19d/0x870 [ 860.487294][T13140] do_recvmmsg+0x63a/0x10a0 [ 860.487334][T13140] __sys_recvmmsg+0x113/0x450 [ 860.487375][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 860.487424][T13140] __do_fast_syscall_32+0x95/0xf0 [ 860.487466][T13140] do_fast_syscall_32+0x33/0x70 [ 860.487506][T13140] do_SYSENTER_32+0x1b/0x20 [ 860.487546][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 860.487615][T13140] [ 860.487623][T13140] Local variable msg_sys created at: [ 860.487637][T13140] do_recvmmsg+0x5f/0x10a0 [ 860.487674][T13140] __sys_recvmmsg+0x113/0x450 [ 861.008444][T13140] not chained 580000 origins [ 861.008468][T13140] CPU: 1 PID: 13140 Comm: syz-executor.4 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 861.008518][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.008543][T13140] Call Trace: [ 861.008557][T13140] [ 861.008572][T13140] dump_stack_lvl+0x1c8/0x256 [ 861.008646][T13140] dump_stack+0x1a/0x1c [ 861.008703][T13140] kmsan_internal_chain_origin+0x78/0x120 [ 861.008758][T13140] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 861.008815][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.008868][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 861.008928][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.008981][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.009043][T13140] ? __get_compat_msghdr+0x5b/0x750 [ 861.009109][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.009162][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.009230][T13140] ? should_fail+0x3f/0x810 [ 861.009283][T13140] ? __stack_depot_save+0x21/0x4b0 [ 861.009334][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.009387][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 861.009445][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.009498][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.009556][T13140] __msan_chain_origin+0xbd/0x140 [ 861.009609][T13140] __get_compat_msghdr+0x514/0x750 [ 861.009688][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.009753][T13140] ? ___sys_recvmsg+0xa9/0x870 [ 861.009796][T13140] ? do_recvmmsg+0x63a/0x10a0 [ 861.009844][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.009893][T13140] ? __schedule+0x1609/0x21d0 [ 861.009942][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.009995][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.010050][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.010102][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.010162][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.010225][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 861.010286][T13140] ? __sys_recvmmsg+0x52/0x450 [ 861.010329][T13140] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.010386][T13140] __sys_recvmmsg+0x113/0x450 [ 861.010430][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.010489][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.010550][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.010596][T13140] ? exit_to_user_mode_prepare+0x119/0x220 [ 861.010649][T13140] do_fast_syscall_32+0x33/0x70 [ 861.010695][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.010738][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.010810][T13140] RIP: 0023:0xf7f64549 [ 861.010841][T13140] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 861.010886][T13140] RSP: 002b:00000000f7f3e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 861.010930][T13140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 861.010962][T13140] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 861.010990][T13140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 861.011017][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.011046][T13140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 861.011085][T13140] [ 861.011099][T13140] Uninit was stored to memory at: [ 861.011166][T13140] __get_compat_msghdr+0x514/0x750 [ 861.011233][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.011293][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.011334][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.011375][T13140] __sys_recvmmsg+0x113/0x450 [ 861.011415][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.011465][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.011506][T13140] do_fast_syscall_32+0x33/0x70 [ 861.011546][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.011587][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.011657][T13140] [ 861.011664][T13140] Uninit was stored to memory at: [ 861.011728][T13140] __get_compat_msghdr+0x514/0x750 [ 861.011790][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.011850][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.011891][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.011931][T13140] __sys_recvmmsg+0x113/0x450 [ 861.011972][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.012022][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.012064][T13140] do_fast_syscall_32+0x33/0x70 [ 861.012104][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.012143][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.012589][T13140] [ 861.012597][T13140] Uninit was stored to memory at: [ 861.012664][T13140] __get_compat_msghdr+0x514/0x750 [ 861.012725][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.012785][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.012826][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.012866][T13140] __sys_recvmmsg+0x113/0x450 [ 861.012908][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.012958][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.013000][T13140] do_fast_syscall_32+0x33/0x70 [ 861.013041][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.013080][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.013150][T13140] [ 861.013156][T13140] Uninit was stored to memory at: [ 861.013227][T13140] __get_compat_msghdr+0x514/0x750 [ 861.013289][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.013350][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.013390][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.013431][T13140] __sys_recvmmsg+0x113/0x450 [ 861.013472][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.013521][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.013563][T13140] do_fast_syscall_32+0x33/0x70 [ 861.013604][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.013643][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.013712][T13140] [ 861.013719][T13140] Uninit was stored to memory at: [ 861.013785][T13140] __get_compat_msghdr+0x514/0x750 [ 861.013847][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.013907][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.013948][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.013988][T13140] __sys_recvmmsg+0x113/0x450 [ 861.014030][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.014079][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.014122][T13140] do_fast_syscall_32+0x33/0x70 [ 861.014162][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.014207][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.014276][T13140] [ 861.014282][T13140] Uninit was stored to memory at: [ 861.014349][T13140] __get_compat_msghdr+0x514/0x750 [ 861.014411][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.014472][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.014513][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.014553][T13140] __sys_recvmmsg+0x113/0x450 [ 861.014593][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.014643][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.014685][T13140] do_fast_syscall_32+0x33/0x70 [ 861.014725][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.014765][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.014832][T13140] [ 861.014839][T13140] Uninit was stored to memory at: [ 861.014905][T13140] __get_compat_msghdr+0x514/0x750 [ 861.014966][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.015026][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.015067][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.015106][T13140] __sys_recvmmsg+0x113/0x450 [ 861.015147][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.015200][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.015242][T13140] do_fast_syscall_32+0x33/0x70 [ 861.015283][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.015322][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.015391][T13140] [ 861.015399][T13140] Local variable msg_sys created at: [ 861.015413][T13140] do_recvmmsg+0x5f/0x10a0 [ 861.015450][T13140] __sys_recvmmsg+0x113/0x450 [ 861.486927][T13140] not chained 590000 origins [ 861.486950][T13140] CPU: 1 PID: 13140 Comm: syz-executor.4 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 861.486999][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.487024][T13140] Call Trace: [ 861.487039][T13140] [ 861.487053][T13140] dump_stack_lvl+0x1c8/0x256 [ 861.487126][T13140] dump_stack+0x1a/0x1c [ 861.487184][T13140] kmsan_internal_chain_origin+0x78/0x120 [ 861.487240][T13140] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 861.487297][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.487351][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 861.487411][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.487464][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.487526][T13140] ? __get_compat_msghdr+0x5b/0x750 [ 861.487593][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.487647][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.487714][T13140] ? should_fail+0x3f/0x810 [ 861.487767][T13140] ? __stack_depot_save+0x21/0x4b0 [ 861.487819][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.487872][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 861.487930][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.487983][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.488042][T13140] __msan_chain_origin+0xbd/0x140 [ 861.488095][T13140] __get_compat_msghdr+0x514/0x750 [ 861.488173][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.488237][T13140] ? ___sys_recvmsg+0xa9/0x870 [ 861.488281][T13140] ? do_recvmmsg+0x63a/0x10a0 [ 861.488327][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.488376][T13140] ? __schedule+0x1609/0x21d0 [ 861.488426][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.488479][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.488538][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.488591][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.488652][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.488713][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 861.488776][T13140] ? __sys_recvmmsg+0x52/0x450 [ 861.488819][T13140] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.488875][T13140] __sys_recvmmsg+0x113/0x450 [ 861.488919][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.488979][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.489040][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.489085][T13140] ? exit_to_user_mode_prepare+0x119/0x220 [ 861.489139][T13140] do_fast_syscall_32+0x33/0x70 [ 861.489185][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.489228][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.489300][T13140] RIP: 0023:0xf7f64549 [ 861.489331][T13140] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 861.489377][T13140] RSP: 002b:00000000f7f3e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 861.489420][T13140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 861.489453][T13140] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 861.489481][T13140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 861.489508][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.489536][T13140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 861.489576][T13140] [ 861.489589][T13140] Uninit was stored to memory at: [ 861.489656][T13140] __get_compat_msghdr+0x514/0x750 [ 861.489723][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.489784][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.489825][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.489865][T13140] __sys_recvmmsg+0x113/0x450 [ 861.489908][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.489959][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.490001][T13140] do_fast_syscall_32+0x33/0x70 [ 861.490042][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.490082][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.490150][T13140] [ 861.490157][T13140] Uninit was stored to memory at: [ 861.490223][T13140] __get_compat_msghdr+0x514/0x750 [ 861.490284][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.490344][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.490385][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.490425][T13140] __sys_recvmmsg+0x113/0x450 01:51:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14}, 0x14}}, 0x40) 01:51:12 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:12 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, 0x0}, 0x80) 01:51:12 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, 0x0) 01:51:12 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af03, &(0x7f0000000400)) [ 861.490466][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.490516][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.490558][T13140] do_fast_syscall_32+0x33/0x70 [ 861.490598][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.490638][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.490711][T13140] [ 861.490718][T13140] Uninit was stored to memory at: [ 861.490784][T13140] __get_compat_msghdr+0x514/0x750 [ 861.490845][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.490905][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.490946][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.490986][T13140] __sys_recvmmsg+0x113/0x450 [ 861.491027][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.491077][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.491119][T13140] do_fast_syscall_32+0x33/0x70 [ 861.491159][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.491198][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.491267][T13140] [ 861.491275][T13140] Uninit was stored to memory at: [ 861.491342][T13140] __get_compat_msghdr+0x514/0x750 [ 861.491404][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.491465][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.491506][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.491546][T13140] __sys_recvmmsg+0x113/0x450 [ 861.491587][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.491637][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.491679][T13140] do_fast_syscall_32+0x33/0x70 [ 861.491725][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.491764][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.491833][T13140] [ 861.491840][T13140] Uninit was stored to memory at: [ 861.491906][T13140] __get_compat_msghdr+0x514/0x750 [ 861.491967][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.492029][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.492070][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.492110][T13140] __sys_recvmmsg+0x113/0x450 [ 861.492151][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.492587][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.492637][T13140] do_fast_syscall_32+0x33/0x70 [ 861.492678][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.492724][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.492793][T13140] [ 861.492800][T13140] Uninit was stored to memory at: [ 861.492867][T13140] __get_compat_msghdr+0x514/0x750 [ 861.492928][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.492990][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.493030][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.493070][T13140] __sys_recvmmsg+0x113/0x450 [ 861.493111][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.493160][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.493202][T13140] do_fast_syscall_32+0x33/0x70 [ 861.493243][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.493282][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.493351][T13140] [ 861.493357][T13140] Uninit was stored to memory at: [ 861.493423][T13140] __get_compat_msghdr+0x514/0x750 [ 861.493485][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.493545][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.493586][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.493625][T13140] __sys_recvmmsg+0x113/0x450 [ 861.493666][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.493721][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.493763][T13140] do_fast_syscall_32+0x33/0x70 [ 861.493804][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.493843][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.493912][T13140] [ 861.493920][T13140] Local variable msg_sys created at: [ 861.493934][T13140] do_recvmmsg+0x5f/0x10a0 [ 861.493972][T13140] __sys_recvmmsg+0x113/0x450 [ 861.959511][T13140] not chained 600000 origins [ 861.959534][T13140] CPU: 1 PID: 13140 Comm: syz-executor.4 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 861.959583][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 861.959609][T13140] Call Trace: [ 861.959624][T13140] [ 861.959638][T13140] dump_stack_lvl+0x1c8/0x256 [ 861.959715][T13140] dump_stack+0x1a/0x1c [ 861.959772][T13140] kmsan_internal_chain_origin+0x78/0x120 [ 861.959828][T13140] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 861.959885][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.959938][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 861.959998][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.960051][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.960111][T13140] ? __get_compat_msghdr+0x5b/0x750 [ 861.960176][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.960229][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.960290][T13140] ? should_fail+0x3f/0x810 [ 861.960345][T13140] ? __stack_depot_save+0x21/0x4b0 [ 861.960397][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.960451][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 861.960509][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.960562][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.960621][T13140] __msan_chain_origin+0xbd/0x140 [ 861.960674][T13140] __get_compat_msghdr+0x514/0x750 [ 861.960759][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.960824][T13140] ? ___sys_recvmsg+0xa9/0x870 [ 861.960867][T13140] ? do_recvmmsg+0x63a/0x10a0 [ 861.960914][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.960963][T13140] ? __schedule+0x1609/0x21d0 [ 861.961013][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.961066][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.961124][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.961176][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 861.961238][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.961294][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 861.961355][T13140] ? __sys_recvmmsg+0x52/0x450 [ 861.961399][T13140] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.961454][T13140] __sys_recvmmsg+0x113/0x450 [ 861.961498][T13140] ? kmsan_get_metadata+0x33/0x220 [ 861.961557][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.961618][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.961662][T13140] ? exit_to_user_mode_prepare+0x119/0x220 [ 861.961722][T13140] do_fast_syscall_32+0x33/0x70 [ 861.961767][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.961822][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.961898][T13140] RIP: 0023:0xf7f64549 [ 861.961929][T13140] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 861.961975][T13140] RSP: 002b:00000000f7f3e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 861.962018][T13140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 861.962050][T13140] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 861.962078][T13140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 861.962105][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.962134][T13140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 861.962177][T13140] [ 861.962592][T13140] Uninit was stored to memory at: [ 861.962661][T13140] __get_compat_msghdr+0x514/0x750 [ 861.962728][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.962790][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.962831][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.962871][T13140] __sys_recvmmsg+0x113/0x450 [ 861.962912][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.962962][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.963005][T13140] do_fast_syscall_32+0x33/0x70 [ 861.963046][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.963085][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.963153][T13140] [ 861.963160][T13140] Uninit was stored to memory at: [ 861.963225][T13140] __get_compat_msghdr+0x514/0x750 [ 861.963287][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.963348][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.963389][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.963430][T13140] __sys_recvmmsg+0x113/0x450 [ 861.963470][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.963520][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.963563][T13140] do_fast_syscall_32+0x33/0x70 [ 861.963603][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.963643][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.963716][T13140] [ 861.963724][T13140] Uninit was stored to memory at: [ 861.963789][T13140] __get_compat_msghdr+0x514/0x750 [ 861.963851][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.963912][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.963952][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.963992][T13140] __sys_recvmmsg+0x113/0x450 [ 861.964033][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.964082][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.964124][T13140] do_fast_syscall_32+0x33/0x70 [ 861.964165][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.964204][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.964272][T13140] [ 861.964279][T13140] Uninit was stored to memory at: [ 861.964344][T13140] __get_compat_msghdr+0x514/0x750 [ 861.964406][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.964466][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.964506][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.964546][T13140] __sys_recvmmsg+0x113/0x450 [ 861.964587][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.964636][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.964678][T13140] do_fast_syscall_32+0x33/0x70 [ 861.964723][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.964762][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.964830][T13140] [ 861.964837][T13140] Uninit was stored to memory at: [ 861.964917][T13140] __get_compat_msghdr+0x514/0x750 [ 861.964980][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.965040][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.965081][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.965121][T13140] __sys_recvmmsg+0x113/0x450 [ 861.965163][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.965212][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.965254][T13140] do_fast_syscall_32+0x33/0x70 [ 861.965294][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.965334][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.965402][T13140] [ 861.965409][T13140] Uninit was stored to memory at: [ 861.965475][T13140] __get_compat_msghdr+0x514/0x750 [ 861.965537][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.965597][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.965637][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.965677][T13140] __sys_recvmmsg+0x113/0x450 [ 861.965723][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.965773][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.965814][T13140] do_fast_syscall_32+0x33/0x70 [ 861.965855][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.965894][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.965963][T13140] [ 861.965969][T13140] Uninit was stored to memory at: [ 861.966034][T13140] __get_compat_msghdr+0x514/0x750 [ 861.966096][T13140] get_compat_msghdr+0x8c/0x1c0 [ 861.966156][T13140] ___sys_recvmsg+0x19d/0x870 [ 861.966196][T13140] do_recvmmsg+0x63a/0x10a0 [ 861.966236][T13140] __sys_recvmmsg+0x113/0x450 [ 861.966277][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 861.966328][T13140] __do_fast_syscall_32+0x95/0xf0 [ 861.966370][T13140] do_fast_syscall_32+0x33/0x70 [ 861.966411][T13140] do_SYSENTER_32+0x1b/0x20 [ 861.966451][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 861.966519][T13140] [ 861.966527][T13140] Local variable msg_sys created at: [ 861.966541][T13140] do_recvmmsg+0x5f/0x10a0 [ 861.966579][T13140] __sys_recvmmsg+0x113/0x450 [ 862.451022][T13140] not chained 610000 origins [ 862.451046][T13140] CPU: 1 PID: 13140 Comm: syz-executor.4 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 862.451095][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 862.451120][T13140] Call Trace: [ 862.451135][T13140] [ 862.451150][T13140] dump_stack_lvl+0x1c8/0x256 [ 862.451233][T13140] dump_stack+0x1a/0x1c [ 862.451290][T13140] kmsan_internal_chain_origin+0x78/0x120 [ 862.451345][T13140] ? kmsan_internal_unpoison_memory+0x10/0x20 [ 862.451412][T13140] ? kmsan_get_metadata+0x33/0x220 [ 862.451465][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 862.451529][T13140] ? kmsan_get_metadata+0x33/0x220 [ 862.451582][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 862.451644][T13140] ? __get_compat_msghdr+0x5b/0x750 [ 862.451710][T13140] ? kmsan_get_metadata+0x33/0x220 [ 862.451763][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 862.451826][T13140] ? should_fail+0x3f/0x810 [ 862.451880][T13140] ? __stack_depot_save+0x21/0x4b0 [ 862.451931][T13140] ? kmsan_get_metadata+0x33/0x220 [ 862.451984][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 862.452043][T13140] ? kmsan_get_metadata+0x33/0x220 [ 862.452095][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 862.452154][T13140] __msan_chain_origin+0xbd/0x140 [ 862.452216][T13140] __get_compat_msghdr+0x514/0x750 [ 862.452294][T13140] get_compat_msghdr+0x8c/0x1c0 [ 862.452360][T13140] ? ___sys_recvmsg+0xa9/0x870 [ 862.452405][T13140] ? do_recvmmsg+0x63a/0x10a0 [ 862.452452][T13140] ___sys_recvmsg+0x19d/0x870 [ 862.452502][T13140] ? __schedule+0x1609/0x21d0 [ 862.452552][T13140] ? kmsan_get_metadata+0x33/0x220 [ 862.452612][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 862.452672][T13140] ? kmsan_get_metadata+0x33/0x220 [ 862.452724][T13140] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 862.452786][T13140] do_recvmmsg+0x63a/0x10a0 [ 862.452843][T13140] ? kmsan_internal_set_shadow_origin+0x62/0xe0 [ 862.452905][T13140] ? __sys_recvmmsg+0x52/0x450 [ 862.452949][T13140] ? __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 862.453006][T13140] __sys_recvmmsg+0x113/0x450 [ 862.453050][T13140] ? kmsan_get_metadata+0x33/0x220 [ 862.453110][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 862.453171][T13140] __do_fast_syscall_32+0x95/0xf0 [ 862.453222][T13140] ? exit_to_user_mode_prepare+0x119/0x220 [ 862.453277][T13140] do_fast_syscall_32+0x33/0x70 [ 862.453322][T13140] do_SYSENTER_32+0x1b/0x20 [ 862.453365][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 862.453437][T13140] RIP: 0023:0xf7f64549 [ 862.453469][T13140] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 862.453514][T13140] RSP: 002b:00000000f7f3e5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000151 [ 862.453557][T13140] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0 [ 862.453590][T13140] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 862.453618][T13140] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 862.453645][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.453673][T13140] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 862.453712][T13140] [ 862.454100][T13140] Uninit was stored to memory at: [ 862.454168][T13140] __get_compat_msghdr+0x514/0x750 [ 862.454237][T13140] get_compat_msghdr+0x8c/0x1c0 [ 862.454296][T13140] ___sys_recvmsg+0x19d/0x870 [ 862.454337][T13140] do_recvmmsg+0x63a/0x10a0 [ 862.454376][T13140] __sys_recvmmsg+0x113/0x450 [ 862.454417][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 862.454466][T13140] __do_fast_syscall_32+0x95/0xf0 [ 862.454508][T13140] do_fast_syscall_32+0x33/0x70 [ 862.454549][T13140] do_SYSENTER_32+0x1b/0x20 [ 862.454588][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 862.454657][T13140] [ 862.454663][T13140] Uninit was stored to memory at: [ 862.454729][T13140] __get_compat_msghdr+0x514/0x750 [ 862.454791][T13140] get_compat_msghdr+0x8c/0x1c0 [ 862.454851][T13140] ___sys_recvmsg+0x19d/0x870 [ 862.454892][T13140] do_recvmmsg+0x63a/0x10a0 [ 862.454932][T13140] __sys_recvmmsg+0x113/0x450 [ 862.454981][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 862.455030][T13140] __do_fast_syscall_32+0x95/0xf0 [ 862.455072][T13140] do_fast_syscall_32+0x33/0x70 [ 862.455113][T13140] do_SYSENTER_32+0x1b/0x20 [ 862.455151][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 862.455224][T13140] [ 862.455231][T13140] Uninit was stored to memory at: [ 862.455295][T13140] __get_compat_msghdr+0x514/0x750 [ 862.455358][T13140] get_compat_msghdr+0x8c/0x1c0 [ 862.455419][T13140] ___sys_recvmsg+0x19d/0x870 [ 862.455459][T13140] do_recvmmsg+0x63a/0x10a0 [ 862.455499][T13140] __sys_recvmmsg+0x113/0x450 [ 862.455539][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 862.455588][T13140] __do_fast_syscall_32+0x95/0xf0 [ 862.455630][T13140] do_fast_syscall_32+0x33/0x70 [ 862.455670][T13140] do_SYSENTER_32+0x1b/0x20 [ 862.455709][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 862.455778][T13140] [ 862.455785][T13140] Uninit was stored to memory at: [ 862.455850][T13140] __get_compat_msghdr+0x514/0x750 [ 862.455911][T13140] get_compat_msghdr+0x8c/0x1c0 [ 862.455982][T13140] ___sys_recvmsg+0x19d/0x870 [ 862.456023][T13140] do_recvmmsg+0x63a/0x10a0 [ 862.456062][T13140] __sys_recvmmsg+0x113/0x450 [ 862.456103][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 862.456153][T13140] __do_fast_syscall_32+0x95/0xf0 [ 862.456199][T13140] do_fast_syscall_32+0x33/0x70 [ 862.456239][T13140] do_SYSENTER_32+0x1b/0x20 [ 862.456279][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 862.456348][T13140] [ 862.456355][T13140] Uninit was stored to memory at: [ 862.456420][T13140] __get_compat_msghdr+0x514/0x750 [ 862.456482][T13140] get_compat_msghdr+0x8c/0x1c0 [ 862.456541][T13140] ___sys_recvmsg+0x19d/0x870 [ 862.456583][T13140] do_recvmmsg+0x63a/0x10a0 [ 862.456623][T13140] __sys_recvmmsg+0x113/0x450 [ 862.456664][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 862.456714][T13140] __do_fast_syscall_32+0x95/0xf0 [ 862.456756][T13140] do_fast_syscall_32+0x33/0x70 [ 862.456796][T13140] do_SYSENTER_32+0x1b/0x20 [ 862.456835][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 862.456904][T13140] [ 862.456911][T13140] Uninit was stored to memory at: [ 862.456976][T13140] __get_compat_msghdr+0x514/0x750 [ 862.457037][T13140] get_compat_msghdr+0x8c/0x1c0 [ 862.457097][T13140] ___sys_recvmsg+0x19d/0x870 [ 862.457138][T13140] do_recvmmsg+0x63a/0x10a0 [ 862.457182][T13140] __sys_recvmmsg+0x113/0x450 [ 862.457223][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 862.457272][T13140] __do_fast_syscall_32+0x95/0xf0 [ 862.457319][T13140] do_fast_syscall_32+0x33/0x70 [ 862.457360][T13140] do_SYSENTER_32+0x1b/0x20 [ 862.457399][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 862.457467][T13140] [ 862.457473][T13140] Uninit was stored to memory at: [ 862.457539][T13140] __get_compat_msghdr+0x514/0x750 [ 862.457600][T13140] get_compat_msghdr+0x8c/0x1c0 [ 862.457660][T13140] ___sys_recvmsg+0x19d/0x870 [ 862.457700][T13140] do_recvmmsg+0x63a/0x10a0 [ 862.457740][T13140] __sys_recvmmsg+0x113/0x450 [ 862.457781][T13140] __ia32_compat_sys_recvmmsg_time32+0xf1/0x180 [ 862.457830][T13140] __do_fast_syscall_32+0x95/0xf0 [ 862.457872][T13140] do_fast_syscall_32+0x33/0x70 [ 862.457913][T13140] do_SYSENTER_32+0x1b/0x20 [ 862.457952][T13140] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 862.458020][T13140] [ 862.458028][T13140] Local variable msg_sys created at: [ 862.458042][T13140] do_recvmmsg+0x5f/0x10a0 [ 862.458080][T13140] __sys_recvmmsg+0x113/0x450 01:51:14 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) read$FUSE(r0, &(0x7f00000006c0)={0x2020}, 0x2020) 01:51:14 executing program 5: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) getresgid(&(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) 01:51:14 executing program 3: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000440)=ANY=[], 0x88) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x5, 0x2a) sendfile(r3, r2, 0x0, 0x7fff) ptrace$setsig(0x4203, 0x0, 0x0, 0x0) 01:51:14 executing program 2: openat$nvram(0xffffffffffffff9c, &(0x7f0000000300), 0x2001, 0x0) 01:51:14 executing program 4: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000440)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000009c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 01:51:14 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:14 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:15 executing program 5: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$FUSE_LK(r0, 0x0, 0x0) 01:51:15 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) 01:51:15 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:15 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:15 executing program 4: add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) 01:51:15 executing program 5: request_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)=':-,(\x00', 0x0) 01:51:15 executing program 2: syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, &(0x7f0000006a80), 0x0, 0x0) 01:51:16 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002840)) 01:51:16 executing program 2: madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xd) 01:51:16 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:16 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:16 executing program 4: pselect6(0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x10000]}, 0x8}) 01:51:16 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 01:51:16 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) 01:51:16 executing program 2: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000) 01:51:16 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:16 executing program 4: openat$hwrng(0xffffffffffffff9c, 0x0, 0x410a00, 0x0) 01:51:17 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, 0x0, 0x0) 01:51:17 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:17 executing program 3: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) 01:51:17 executing program 2: syz_open_dev$media(&(0x7f0000001b80), 0x0, 0x0) 01:51:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:17 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000380)={'vcan0\x00', @broadcast}) 01:51:17 executing program 3: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/4096) 01:51:17 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000002800), 0x8c240) 01:51:17 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x181680, 0x0) read$eventfd(r0, 0x0, 0x0) 01:51:17 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, 0x0, 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:17 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:17 executing program 4: openat$dsp1(0xffffffffffffff9c, 0x0, 0x430400, 0x0) 01:51:18 executing program 3: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/4096) 01:51:18 executing program 2: syz_open_dev$sg(&(0x7f0000000000), 0x681e, 0x0) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000001600)=[{0x0}], 0x0, &(0x7f00000016c0)={[], [{@fowner_eq={'fowner', 0x3d, 0xee01}}]}) syz_open_dev$audion(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup/syz0\x00', 0x200002, 0x0) 01:51:18 executing program 1: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) 01:51:18 executing program 5: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0}, 0x68) 01:51:18 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, [""]}, 0xfffffffffffffff4}}, 0x0) 01:51:18 executing program 3: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/4096) 01:51:18 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:18 executing program 1: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) 01:51:18 executing program 4: syz_open_dev$cec(&(0x7f0000000000), 0x1, 0x2) 01:51:18 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) 01:51:18 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, 0x0, 0x0) 01:51:19 executing program 3: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000600)=""/4096) 01:51:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000880)=@req={0x28, &(0x7f0000000840)={'bond0\x00', @ifru_hwaddr=@broadcast}}) 01:51:19 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 01:51:19 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60000, 0x0) 01:51:19 executing program 1: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) 01:51:19 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:19 executing program 3: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6}]}) 01:51:19 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) 01:51:19 executing program 5: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) 01:51:19 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) [ 869.729890][ T25] audit: type=1326 audit(1655862679.783:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=13305 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa8549 code=0x0 01:51:19 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:19 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:19 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000040)) 01:51:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0}}, 0x81) 01:51:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000780)={&(0x7f0000000600), 0xc, 0x0}, 0x0) 01:51:20 executing program 2: keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)='/,\xed^!%$&,[-\x00') 01:51:20 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:20 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$watch_queue(r0, &(0x7f0000000340)=""/21, 0x15) 01:51:20 executing program 4: r0 = syz_open_procfs$userns(0x0, &(0x7f0000000540)) setns(r0, 0x10000000) 01:51:20 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:20 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) 01:51:20 executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) 01:51:20 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:20 executing program 3: select(0x40, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x8}, &(0x7f00000000c0)={0x77359400}) 01:51:20 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 01:51:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22401) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x9}) 01:51:21 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) epoll_wait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0) 01:51:21 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x0) 01:51:21 executing program 4: request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) 01:51:21 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22401) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x9}) 01:51:21 executing program 2: rt_tgsigqueueinfo(0x0, 0x0, 0x0, &(0x7f0000000100)) 01:51:21 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:21 executing program 3: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 01:51:21 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={0x0}, 0x46) 01:51:21 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22401) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x9}) 01:51:22 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)) 01:51:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)) 01:51:22 executing program 3: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x9, &(0x7f0000000080)=[{0xb4, 0x0, 0x81, 0x3}, {0x194, 0x5, 0xe4, 0x6}, {0x5, 0x6, 0x62, 0x6}, {0x7, 0x6, 0x8, 0x8b}, {0x7, 0x6, 0x94, 0x800}, {0x2, 0xa8, 0x1e, 0x2}, {0x7fff, 0x82, 0x3, 0xfc18e217}, {0x7ff, 0x6, 0x63, 0x80000001}, {0x100, 0x1c, 0x80, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff, 0x9, 0x80000}) keyctl$restrict_keyring(0x1d, 0xfffffffffffffffd, &(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)='/,\xed^!%$&,[-\x00') r1 = add_key$fscrypt_v1(&(0x7f0000000500), &(0x7f0000000540)={'fscrypt:', @auto=[0x64, 0x38, 0x39, 0x39, 0x35, 0x36, 0x37, 0x61, 0x64, 0x1c, 0x61, 0x38, 0x36, 0x35, 0x37, 0x64]}, &(0x7f0000000580)={0x0, "53220712c1f4a22cdbb637cb7d8e520a294464d357941fc8635b37e4ec4c12b2ed897508bb8bf10283f629f41027c011f6cef0b4eb52fb492787d881efe1f14e", 0x37}, 0x48, 0xfffffffffffffff9) request_key(&(0x7f0000000440)='pkcs7_test\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)='!}\xfc\xa1@\x00', r1) keyctl$instantiate_iov(0x14, 0x0, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0x0) request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='-\x00', 0xffffffffffffffff) request_key(&(0x7f0000000180)='encrypted\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='encrypted\x00', r2) 01:51:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 01:51:22 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 01:51:22 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22401) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x9}) 01:51:22 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) 01:51:22 executing program 4: epoll_pwait(0xffffffffffffffff, &(0x7f00000008c0)=[{}], 0x1, 0x0, &(0x7f0000000900)={[0x7]}, 0x8) 01:51:22 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000840), 0x12b000, 0x0) 01:51:22 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000002c40)=[{0x0}, {0x0}], 0x2, &(0x7f0000002c80)=[{0x10}, {0x18, 0x1, 0x1, 'e'}], 0x28}, 0x0) 01:51:22 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, 0x0) 01:51:22 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) 01:51:23 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:23 executing program 4: socket$rxrpc(0x21, 0x2, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)="85") geteuid() 01:51:23 executing program 3: mq_notify(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}) 01:51:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000001) 01:51:23 executing program 5: pselect6(0x40, &(0x7f00000001c0), &(0x7f0000000200), 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x9]}, 0x8}) 01:51:23 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) 01:51:23 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, 0x0, 0x0) 01:51:23 executing program 4: clock_gettime(0x0, 0x0) syz_mount_image$ocfs2(&(0x7f0000000340), 0x0, 0x0, 0x2, &(0x7f0000000680)=[{&(0x7f00000003c0)="92ff5b", 0x3}, {&(0x7f0000000500)="93", 0x1, 0xfffffffffffffff7}], 0x0, &(0x7f0000002740)={[{}], [{@fsuuid}, {@fowner_gt}, {@context={'context', 0x3d, 'unconfined_u'}}]}) 01:51:23 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 01:51:23 executing program 2: sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0xb265d8ecb1800b2f) 01:51:23 executing program 5: getpeername$tipc(0xffffffffffffffff, 0x0, 0x0) 01:51:23 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 01:51:23 executing program 3: prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000002440)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) [ 873.900080][T13424] loop4: detected capacity change from 0 to 264192 01:51:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f00000000c0)) 01:51:24 executing program 5: syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f00000004c0)="b3", 0x1, 0xfffffffffffffffa}], 0x0, 0x0) 01:51:24 executing program 4: syz_mount_image$ocfs2(&(0x7f0000006480), 0x0, 0x0, 0x0, &(0x7f0000006a80), 0x0, &(0x7f0000006b80)) 01:51:24 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 01:51:24 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 01:51:24 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 01:51:24 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) read$FUSE(r1, &(0x7f0000004380)={0x2020}, 0x2020) [ 874.314327][T13435] loop5: detected capacity change from 0 to 264192 01:51:24 executing program 5: epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x8) 01:51:24 executing program 4: r0 = syz_clone(0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000001800)) 01:51:24 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 01:51:24 executing program 2: bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) 01:51:24 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, 0x0) 01:51:24 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000900), 0xffffffffffffffff) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 01:51:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:51:25 executing program 4: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 01:51:25 executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000180)={0x0, 0x0, 0x100000}, 0x20) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) 01:51:25 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x410002, 0x0) 01:51:25 executing program 1: pselect6(0x40, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), 0x0) 01:51:25 executing program 3: ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)={0x38, r1, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}]}, 0x38}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) 01:51:25 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:51:25 executing program 4: setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000000), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) 01:51:25 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r0, &(0x7f0000000040)={0x8, {"e55975fb0899b4a659a028f852aab1d7c770e0bdbed44b75d0d6ffd427fbe2879446bdcd2908f9ec49bada1736c7e5aa0b6e95cb4ad8a79ff0c672d438121f73fdf7de81e9ccbd601297f669f9764f1ae8d46d597293e225b1da73e8b322a5e1777becd2c5b9b728ad51e9e047798500747452a05eec3aa7a3e7f85efc3777605ecd69e7686bf2230367530ef4dc5726251f1353454640f02ad3b7505798bb770657987d65bfc39d05a028538034fa9523b1e0b2a91a9860fcc8a23b40b2586338847d7dda2030bde3eca521cc5f7e1dcd4ce77e0a8576767f5c7fc2a8ca468c20154be1a75e48629d4351b61fcc0ce3a0fbddabff913f6f26b3f387ee4e5af4ecdd165eda9a9cfa5444e5dfec0ad6a999625566916c19ed3ddea16a577c61a12794c8cce0071702bc3838a4c2fd9ba0d6bb3b1457f35a78042370500a3affee08f3c680c1345e28ec6debb4c52b31c75f30605f6a0cfe59aa508d221167667cb45df92fb3f6d78524f60f8578956cf64c621c50dbbae0ac5803cf425c5326a31eeb579eb4189f6411f11f2de3694dd2a16b687852e2c23817be23e390dc4fef0d06c3fdd479c725ae319a20d8e250fcf1139bd73cd7e204de86371f6ac2762c10d1de020f67e1101d593ce274dcc4ef6e2e14724ebd6cb85638de60651a447ad505f122f7255ce261d4704bf62f2de837ed7f9181b463664304a9e78bb2c0766dbcd1347bb3cd5d258ffd3df13173b2aaf0ef11f6fa2234e327170f7d69e704ecadaf7e90eeb0a0baafbbb7ec8bcf2a612eabb360ae717b172c456dc5fb3c56616ea15e1581682fa1b4d7da8aa6c5eaa30a389adeac40ea85287388440a201720d52c69f91eb358fad348dfcdc33e2ded951ab704ff6ba85c23cb36805a1d003d092f4558d5a72a66321a060a41fd3112b3b7a2765bb7902b84c6583f02dc4bca80ec51450f43d4d00d271c5adff638c37a603690b79e79ff22194d437dc4c778dee66191f4ff9055c7667e99efc3eba063713def4a0f84f815b83919eb3c22bdd7157ddd41e1701faa47d33cbd406999e9593769381587b51924c7e3b1a6333fcf6be451445168076c58291b8647e4284d6f7a4e1314c925c8cb3ef04a95ac37286ec93126b805208849e36ffc86b451d32bb903076530fc3a7164813318f03fac105211a8110ebf68e2653ad1dedd523f19a1f055f18ee2953cc528e49ab1c7b96812357ba7952e6b0760921bb3b979753bbed6120cf0369b3ea05c2e6466c1b562fbbf1c0128e194c88e341cfbf3bb781e8639b34dab4ed78325400a300525d83479d6d584a4fd16388c8471ca3c7c2bdf575e4468ee255e303983c05cab95bcaa142c683cc3700fa792e2af74112a942ec21b71a05894250ac3d2bf92e1d7f70126558eae217618429ca267bede8e26506760a07af92e438ed7af8bac4d705de62db0315ec4b84f3afcaa34ad9847daa7a7bb34492fef3e8bc3ec92b258b506507ee22f24312362aa3f1ab43a03da4c9abc879ede0f3effe8affdb3775cb942f623de5fe9c7046d856793ae1b4fdebf3e9107740f5513684f6e18fa484b9923739555beb3161edfd22ef79c9745a1b6ca5f0d57af8abc457b85c9791fa06628f4cbad87b3c79ff2522a2c2c58c5946d68c2aa3097195426028e8970735d625dd73408a1e2ef6025b10dcb05f4d3105d73132616bf09cc709f7d96a488eb11a995d975119c62c26e3efdfcc2ee4940b074ae13981198e73b4528ec00afb11b5ad98797c29c078baf2b1405cff1a4958f9978810d1fdaa53c70819e7fb3885f7a789577a4754b07555fe8b6a5c470c8d19377e44eaa5de7d29d7d7a6efb25762e3b389bbbc59ef756bd25b2b07e53bc274440c9f1b41d46dc9bc32b57d7f8dbefc977fe680efeb985d2246c3e1d104612795f5bf4e69ee1283569193ae25a1e49a390d558dd16c16b926bf460df7099099ec1a86988d9deea1dc2788c49cf6e0f80fb85c55dd0130628eb82502e707392e2f7d213b7af011157d35d441c9872a5c07a6bbb3e5681378c3d60684dc69c7cfec889fa30c5849cebd9f266b6bb8c7970a88ecdabed75d4d131984a5e02614c686bec8202d3fe000e9a2c6129b0ffa2ab33ca15c0f22dafc97945e8f36b2939e0133ae56deade0ed46c1f35d5167dc9096f4e05b11cf1dec9f4f269bb2fb33fd2d6d9e0929aaa378ee3a813505a2c72e5c0e020111a6c8f64802dee8025baa5f057aa3c1459c402198fe54591564abd4d9acf78132a3588783e2be936651e2b572a1879613c41475c82b0198c8e6e2d402990b9b89fee1b25e09dc6d32935c6f15fc41e88cc544d2f7ffea7b99477ea8880f0cd9aab3b892a3877b390231b08cc079964d49bcffbb6269ef9ade8b369b5c057bcdabb1d8778ea827993fa57b136c7ef7a1151bfd1a5a437a8b3e7ea0f1153863d114ea457cae27689ac577257d87eff3e586833f05a9babb8eac52b551815f29f49a1c6512b3bc78427be1d68655563622e1518303d53eab84656c9016de9b41dd4ce0f8f1ca0711308e574f0dd2f860d0f7e8d905b5f997b55cdd9481847e876435508e8358ba6975c910aa120f858f1b9f855b2b75180dda09b7f932c881946439f09f0171f5fd6ea27e6e436cfa7ee52b967a50a17bede7295e096c1cfce8dc46991a12f13287489555f01a425783a17a0718b999f4f99ec495771fe8c1b8abd7f221272e22f7dfa75bcbc2a5172a5eae087d74c558f4fab6b13e580ca6fa7638e21a2202264bc0af3fb2cc911b43e5bbce453f0912464d4b244fb410b1fcd91d2bd513d9a0417194df188d1babd0e16f039c21a436fbf581a67f2535e435d0e6b6f5cdbddecda295e570d4deb28a94f4bb21d25887fe31d9963dde2d011a2b8b04da46d9ebb377fe2d2c8c9f7e4e5e2596afa690e0628cf955ee5986cfd32fb84535ec1f4aaf77db61a41b404caea494155178362eccf475b34b6d5eb0e18e3e6a81f2cfd3a7448c9d460a7666e873021adde5c365434ed67f1ef5484d4590a4397309afc807a0d26d4b26d9baf61276ea02085d82678cfb6c744c185458a54842fd60bc78ecfbfa6ef48c9a8c82fe482823ca15827c1d445320a56f9c986cf1f690016783fc5b5c9976b0f9844d1e4a5d57e24d13bf14a78203b5659cb6dde49d709338e58f78d0978355a062aa799e620ecd03c41bdac91377909c28757ba527963fa91f6ffe3742234faecc318f9de6725827ad79ac2ddc80dcea4a703646cd22b07a70213de744b99a4d24b22f47782f249a5476f1f69f2e31c4f34f53486b135dde097b28042ed376398aa559a2e74adfa6dad95bca80c3256a6a3138b109281524ae6138e65c3990c394d3c2efc17e67216b680ca12cb424a5c84435540b1ca7ece4a5d196258ce1eda92e4d797d3f3903377d547e76fedfa5511f2b63057d6ab2b6f830ad957e83d1976ff83aa37e7278ba42e6a3f3a1bd1e2ee0bceed72995b012f12e8ba2969d9fde71c3f37c47317d556b15b9560583add25083a754605924c46c446aa7ac560cf94e30e4fd571a982274541e57b76c27690e727bcf893ceffba3c33684d62ca7c677238422ac6b989e1a16bf659a3ff699426a71a808748e737e28ebd0a911f83e303bf49c0c3bc2c0bd6c5236f8ca5c49fdcf5b2c9bf8d4ebc60bc10f2c49ed95e4ae56d49cb784c9ff0cde7354095a7f5b9c10a8b508be647d6f314b5591d7f50f25e3e2db70ad22e03adf143a66a1ddb06ed7ba184842e4e35639cda94392f41669cc03a1bd885f619f37847f13a1b0d8d682af695e73b2bf58c612823f1c43f5b340c48da3897fbb7df3e902cd34b325ae62bca63e462ffedf83fa0e1823f6a1f2d7ccbcfcfb0351c7ad9a97eedae56f25fd6685f70985064d82f48cef3ea3e4d77db96cbddb9c5157a0eee3c4aa659e8683d26e0383851e6ec312e441f8ba57469a9f99aebf6c08e816572a45c94023791a142413ef84f966b0262693b433b78cb7c99a55983d8815baef960eaebf0c14c9752f351152499df3e59ca93cf6b39c2159e99fccf0c68f2f489fc862631189c5ed0435d6f4c8364ef1b2f2d59c0ee97292f0dca628009b3bc2284fec583b45f3169355f0ce50d78f88be879b63fd07d6f6eea29cb9d6d9f5580f6e46d2475ed4ef517fb7038765be0afab89e471a7bcddd8f00294d0e89d98947ec995d8cb6bc78d9b251fab891da3d89c6521886056fd123d7a9be2c9ffc382eb3d0682bf5fde464a9d190d4f7fd2a7c8597f922e8a33c9f992e86d984b471d422305ddf57eceb241f74d3dcfefd2f62b56c1a6dc93a0254e6cdc67bc26264c00270e977462dc42559b1a09a848abce4ca144b0416f5615591694aaaa2bcc5b9c47614b76ee12822bf29f481f2bd574592f7fceff112209fc75795a667f5bb51b4023b792f6bba86d98b60b3fd140565478ee98695ac62489cd3e11b779be931a99c27f670918b077f501440ec7bd4d4107e1c843fe1ff426626ae2aa30e78530ac19923482472ffb39e52c597e921a1ecf42b809e236196e649b60055e902045527f9e33b1472d63d7496bc4fc53f2b2fe1988360a997f976d5423587b604943b9412775dcf881966bc9d14566d958bb1a7f6c1f8099f91fcf933300c7c7c4e2e4660dfa5980c8b134bdddfafa736a0e0763611101c6a9ebd9f2051c0e7ffeca77881b8c085d030ab06bc95ffcc608cf3f912dc4f12dab1205d0378382f229bcfaf8361018d7b586f166f882da749a4f8686afc25284de60e5b7b4c32d1a12bf008968373d37024134c7604697aea0d4a7e698213cf055936359448da544e4b2e97b252a0b9c0862821dd47cbadb28cf5ed43b4be4a2be09fbcd839fbdc01e382cf8a315da5013453b8704c2e989b218001753554a20e02bcb454e1e4e088ea044005a5468b37977ddb11ec5f57ac04e9e136e355ce155f8c658531f801ed7f07781cee76774cedea452619b500648c3f9f911a5e54ae3aa620837709be6d03c293ef45a6d76b1f58f070a8fe176724dc7560dc9d83171cb4605a57b938ef234a4e02fcdd98f62cf0b847c22bfe71b64eb00e972891a9a7ea59235c9237eb146d5c2518ca33878482c131fb6562abb823b8c27c043e2d0486e5ffe44c9f8b7be54647b2d9104c6d5ae2287a39623466880a665fbd762866f1e9b84866de4aec7e23e5afafd7e45f1ad6d028d38749085f699bd948021f61ef72cc8004815786f30a94b295d66ceb0a944edaf75321a4eb7fbf7b537e44c89bf95ed831d9ea5f23bb7aa4910f28e79e2d6851f5ea55c078fdd6ab51b8d3d47b5ee689884889559101e7a784e0d594afa0a671addce60ded240c4cd075c9a314986fd9183d637f4dc8c2e93ec15461c908e62b502b505a07fe148d79087e41690f00c682002bcc5cd6589bf1106954815b2c9a2ce8540f14e2c173a665927cf232edcf783092ad5a51376c66a0bb1064776d89ca27c3acbc542e2d2269d5747dc6013e77d1a0c9fe8498780410c9305054c5af8b73406be22b6767df43bf09fc8b33e962394eebdf19c326e59db6d36dae8fb814c75b3ee5910034c28a8914ac1e4f0848061308a7e2daad56c36a7e785f0aea375e364fff6e06c9dae3bc7b3685d081aca87f11ad71f3234ec3a2681501fdb8532be724cd8d4d8e7396685f2d227632a6342574683b407765224efbf648a6b2273ad57f32e4b695f1b0c1755187eaa25dbfc078cd676569f1d1aa1d5b84e48e61a36ee370c2fe278b4cc411162dfadb0bd91", 0x1000}}, 0x1006) 01:51:25 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x13, 0x0, &(0x7f0000000000)) 01:51:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:51:26 executing program 0: openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) 01:51:26 executing program 3: mount$9p_fd(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000200)) 01:51:26 executing program 2: semctl$IPC_INFO(0x0, 0x0, 0x3, &(0x7f0000001000)=""/72) 01:51:26 executing program 4: r0 = add_key$keyring(&(0x7f0000005a80), &(0x7f0000005ac0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) 01:51:26 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 01:51:26 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000040)={0x18}, 0x18) 01:51:26 executing program 0: socketpair(0x18, 0x0, 0x1, 0x0) 01:51:26 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, &(0x7f0000000480)) 01:51:26 executing program 2: add_key(&(0x7f0000000140)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0x0) 01:51:26 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x84000, 0x0) 01:51:26 executing program 0: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0xfffffffffffffff9) 01:51:26 executing program 5: getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) 01:51:26 executing program 1: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) read$FUSE(r0, 0x0, 0x0) 01:51:26 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 01:51:27 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$watch_queue(r0, 0x0, 0xfffffffffffffda1) 01:51:27 executing program 4: r0 = socket$pptp(0x18, 0x1, 0x2) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x2e) 01:51:27 executing program 0: pselect6(0x0, 0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x10000]}, 0x8}) 01:51:27 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 01:51:27 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, 0x0) 01:51:27 executing program 3: clock_gettime(0x0, &(0x7f00000002c0)={0x0}) select(0x40, &(0x7f0000000200), &(0x7f0000000240)={0x2}, &(0x7f0000000280)={0x4}, &(0x7f0000000300)={r0}) 01:51:27 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x60000, 0x0) 01:51:27 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, 0x0) 01:51:27 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) 01:51:27 executing program 5: r0 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r0, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) 01:51:27 executing program 1: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x6, &(0x7f0000001600)=[{&(0x7f0000000140)="7c69492985bd47939aeff25f2e8db96610b3b8b41247ac3163bc0548b9573a98e3cd2de4526d63fa725c5cf1a8951c6a493d5d7d071f899c910c2884569eaac51f5c1cb2ec7ac870e2322c9d16586bf9fc9705028d76ace1ff5c2b5ab747133ffd7a0dcf8c717e60b37ec98a7e19fd3931feee52e3386bafd4ac09d3a50e0c6229fee47deb655122015634b942b5a7c192b29ac1b9a2c92b79be55721c891cdece1becdd2e0eb330f03b5becc4a9d1b3d4d95b40f834ada6122760ef8a4d953ac55c7ad815a541452944c419d50c15e212fa9d6a697d7b6384f67b", 0xdb, 0xac}, {&(0x7f0000000240)="5bd1cf369837b7247d80935c20cf5136f7df10a2a7c57d808d5175b36211fd70806afb6c285118e9032499974b62406a522e85d70dbf9e4918286c5d8c3f4481a709fe315f2ee679", 0x48, 0x7}, {&(0x7f00000002c0)="e893b97a1e74f01176bfaaa3485475df37f27f85a7e1533500b31594f531e30754335b7ba38f6fbe2b7bfb035b8353b931dc8d4dc8dcc61bc37ad9c1f58d7dc2be04578578e93e5bdeaad65a0f3c10463210a6b19b35150d7db55ce6fdb02da56222af465a9eeefeb8f90272334ccb87b18c449b068a93579f8adc6a7dc439050d5973916bc71e776d4c542719466c3385a7541ea4b27165f1b94a9ab91b536cb83d29c17b709b8f35bd65f31ed91bea3c9fe22f3710a637ed097162cbee728541cdc08b953b718480fc64c17e8ba830e55532a79fe3553c3988340dad0ad6498d2e0856e0b8f3fcd6be17839d29", 0xee, 0x5}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000001480)="ae044a1d1326fb7089c678cfdd12c6e19df80fc7235df16c9e7f8d800d9ad04545185d36d5b12b2dea8634aa41cf41ff062918c29d8e22648384d4a9dd5db13998d92836c28a7c2378d3e461c8f77176b4b5e103b7cee060c3db9ffe95ef19731ab07bf4f492482cd10957947c2a48c3ef19757d4d8ac72d10874043458469c1e2715d9f5b3ec841ffdbe382", 0x8c, 0x6}, {&(0x7f0000001580)="162fff0efafa3c1609a5de27492e46af25b436520136e7bb73c99aae17d1a1a5a49cc823ca3d90bff26a8e", 0x2b, 0x800}], 0x800, &(0x7f00000016c0)={[{@force}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x31, 0x7, 0x6, 0x34, 0x62, 0x33, 0x36], 0x2d, [0x32, 0x30, 0x63, 0x34], 0x2d, [0x63, 0x37, 0x61, 0x62], 0x2d, [0x0, 0x61, 0x30, 0x32], 0x2d, [0x5c, 0x63, 0x35, 0x33, 0x35, 0x39, 0x37, 0x57]}}}]}) r0 = syz_open_dev$audion(&(0x7f0000001780), 0x9, 0x10000) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f00000017c0)) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000001880)=0x7) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f00000018c0)={0xc0, ""/192}) getsockname$packet(0xffffffffffffffff, &(0x7f00000019c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001a00)=0x14) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000001a40)={0x2014}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001b40)=@base={0x6, 0x1, 0x8, 0x8, 0x1000, 0xffffffffffffffff, 0x1, '\x00', r1, r0, 0x0, 0x5, 0x5}, 0x48) 01:51:27 executing program 3: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x80081, 0x0) 01:51:27 executing program 2: syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x1, &(0x7f0000000680)=[{&(0x7f00000004c0)="b3", 0x1}], 0x0, 0x0) 01:51:28 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$tipc(r0, 0x0, &(0x7f0000000180)) [ 878.036308][T13534] loop1: detected capacity change from 0 to 8 [ 878.076092][T13534] Dev loop1: unable to read RDB block 8 01:51:28 executing program 0: getitimer(0x3, &(0x7f0000000080)) [ 878.076241][T13534] loop1: unable to read partition table 01:51:28 executing program 5: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000300)) [ 878.111924][T13534] loop1: partition table beyond EOD, truncated [ 878.112560][T13534] hfsplus: unable to parse mount options 01:51:28 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private1, 0x0, 0x700}}) 01:51:28 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000340)) 01:51:28 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x210080) 01:51:28 executing program 4: add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @desc3}, &(0x7f00000004c0)={0x0, "cd4b0132ed9484bbc433ff937d400f96879c9c8b72da3d66b09d235e7459932f94d71ac45e22e400e4fec20a4dd7fa70a5a9c82957579582888443753a614e5a"}, 0xfcce, 0xfffffffffffffff8) 01:51:28 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, 0x0, 0x0) 01:51:28 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 01:51:28 executing program 2: syz_mount_image$hfsplus(0x0, 0x0, 0x0, 0x1, &(0x7f0000001600)=[{&(0x7f0000000140)="7c69492985bd47939aeff25f2e8db96610b3b8b41247ac3163bc0548b9573a98e3cd2de4526d63fa725c5cf1a8951c6a493d5d7d071f899c910c2884569eaac51f5c1cb2ec7ac870e2322c9d16586bf9fc9705028d76ace1ff5c2b5ab747133ffd7a0dcf8c717e60b37ec98a7e19fd3931feee52e3386bafd4ac09d3a50e0c6229fee47deb655122015634b942b5a7c192b29ac1b9a2c92b79be55721c891cdece1becdd2e0eb330f03b5becc4", 0xad}], 0x0, 0x0) 01:51:28 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002840)) 01:51:28 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0) 01:51:29 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, 0x0) 01:51:29 executing program 0: ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) 01:51:29 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004, 0x12, r0, 0x0) 01:51:29 executing program 2: ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) 01:51:29 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 01:51:29 executing program 3: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f00000016c0)) 01:51:29 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(r0, 0x0, &(0x7f00000000c0)={'batadv_slave_0\x00', @ifru_mtu}) 01:51:29 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 01:51:29 executing program 4: syz_open_dev$media(&(0x7f0000001b80), 0x80, 0x0) 01:51:29 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=[{0x18, 0x0, 0x0, "82"}, {0x10}], 0x28}, 0x0) 01:51:29 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000140), 0x42) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 879.648523][T13575] hfsplus: unable to find HFS+ superblock 01:51:29 executing program 3: request_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='%\x00', 0x0) 01:51:29 executing program 5: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000002c40)=[{0x0}, {0x0}], 0x2, &(0x7f0000002c80)=[{0x18, 0x0, 0x0, "82"}, {0x10, 0x1, 0x1}], 0x28}, 0x0) 01:51:29 executing program 0: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x0, 0x0) 01:51:30 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x3cf142, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) 01:51:30 executing program 2: request_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='\n*#\x00', 0xfffffffffffffffe) 01:51:30 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002840)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000006380)) 01:51:30 executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 01:51:30 executing program 5: syz_mount_image$ocfs2(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002740)) 01:51:30 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004380)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, 0x0, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f000000c4c0)={0x10, 0x0, r1}, 0x10) 01:51:30 executing program 1: syz_open_dev$sg(0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), 0x0, 0x0, 0x1, &(0x7f0000001600)=[{0x0}], 0x0, &(0x7f00000016c0)={[], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[], 0x2d, [], 0x2d, [], 0x2d, [0x0, 0x0, 0x0, 0x32], 0x2d, [0x0, 0x0, 0x35, 0x0, 0x0, 0x39, 0x37, 0x57]}}}]}) ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000001880)) ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 01:51:30 executing program 2: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f00000003c0)=[{}]}) 01:51:30 executing program 4: sysfs$1(0x1, &(0x7f0000000000)='0000111122223333') 01:51:30 executing program 5: accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x400) 01:51:30 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x80000001, 0xc2041) 01:51:30 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) 01:51:30 executing program 4: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000300), 0xffffffffffffffff) socket(0x2a, 0x0, 0x0) 01:51:31 executing program 2: openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0) 01:51:31 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)) 01:51:31 executing program 3: add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "c9ddf15bb5bea44cf5e71a1aec70c3367d7abaf0cbd48af697478bb150e162faef236dc198be23820860c5eee7e2c1ee31522deefb5100609ffe300f72d078a1"}, 0x48, 0xffffffffffffffff) 01:51:31 executing program 1: syz_clone(0x120000, 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000180)='C') 01:51:31 executing program 4: openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1200, 0x0) 01:51:31 executing program 0: syz_open_dev$audion(&(0x7f0000001780), 0x0, 0x0) 01:51:31 executing program 2: r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) 01:51:31 executing program 3: add_key$fscrypt_v1(&(0x7f00000005c0), 0x0, &(0x7f0000000640)={0x0, "a163ab69007cacb404c4488e62a2d1a9f0411c332b1d92804727d47f71a09cc9420bf9b21ac2d3c9aca8fd0056176359b0f8bf4d7fbfe478cab69a78fc5df6e9"}, 0x48, 0xfffffffffffffffb) 01:51:31 executing program 5: syz_open_dev$dri(&(0x7f00000000c0), 0x700, 0x0) 01:51:31 executing program 0: sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) 01:51:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) 01:51:31 executing program 4: syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 01:51:31 executing program 2: msgget(0x3, 0x700) 01:51:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0500003e"], 0x34}}, 0x0) 01:51:32 executing program 3: add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000280)={'fscrypt:', @desc4}, &(0x7f00000003c0)={0x0, "87627688586072cca71402fafa462369029144bb729fff3ea6dc048cc2ed9940bf1401a6cd860f05cdb13618188c37a677068c414e990ecb5b3ef21f9c1f6543"}, 0x48, 0xfffffffffffffffd) 01:51:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x6c}}, 0x0) 01:51:32 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 01:51:32 executing program 2: setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000040), 0xffffff48) 01:51:32 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4040, 0x0) 01:51:32 executing program 3: openat$audio1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 01:51:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000880)) 01:51:32 executing program 0: request_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0xfffffffffffffff9) 01:51:32 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) 01:51:32 executing program 1: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'c', ' *:* ', 'rm\x00'}, 0x9) prctl$PR_GET_TSC(0x19, &(0x7f00000006c0)) 01:51:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x14}, 0x14}}, 0x0) 01:51:32 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close$fd_v4l2_buffer(r0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, 0x0) 01:51:33 executing program 3: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$fb(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000001, 0x10, r0, 0x0) 01:51:33 executing program 4: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)) 01:51:33 executing program 0: add_key$fscrypt_v1(&(0x7f00000005c0), &(0x7f0000000600)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "a163ab69007cacb404c4488e62a2d1a9f0411c332b1d92804727d47f71a09cc9420bf9b21ac2d3c9aca8fd0056176359b0f8bf4d7fbfe478cab69a78fc5df6e9"}, 0x48, 0xfffffffffffffffb) 01:51:33 executing program 1: add_key$fscrypt_v1(&(0x7f00000005c0), 0x0, 0x0, 0x0, 0xfffffffffffffffb) 01:51:33 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 01:51:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0xfe62}, 0x14}}, 0x0) 01:51:33 executing program 3: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'c', ' *:* ', 'rm\x00'}, 0x9) pipe2$9p(&(0x7f0000000080), 0x80000) 01:51:33 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) 01:51:33 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, 0x0) 01:51:33 executing program 1: bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) 01:51:33 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002840)={0xffffffffffffffff}) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 01:51:33 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@remote, @in=@loopback}}]}, 0x50}}, 0x0) 01:51:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) 01:51:33 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @dev}}) 01:51:34 executing program 4: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000140)) 01:51:34 executing program 2: syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x1eac83) 01:51:34 executing program 1: add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffa) 01:51:34 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x402) 01:51:34 executing program 3: rt_sigsuspend(&(0x7f00000000c0)={[0x8]}, 0x8) 01:51:34 executing program 0: openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) 01:51:34 executing program 4: openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x20200, 0x0) 01:51:34 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 01:51:34 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x4a) 01:51:34 executing program 5: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0), 0x8}) 01:51:34 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, 0x0, 0x0) 01:51:34 executing program 4: bpf$OBJ_GET_PROG(0x7, 0x0, 0x3) 01:51:34 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x1081500, 0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)="e4") 01:51:34 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x4a) 01:51:35 executing program 5: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/locks\x00', 0x0, 0x0) ioctl$SG_EMULATED_HOST(r0, 0x2203, 0x0) 01:51:35 executing program 0: r0 = epoll_create(0x6) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x80) 01:51:35 executing program 3: write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) 01:51:35 executing program 4: syz_clone(0x8010100, 0x0, 0x0, 0x0, 0x0, 0x0) 01:51:35 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x4a) 01:51:35 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002c80)=[{0x10, 0x1}], 0x10}, 0x0) 01:51:35 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) 01:51:35 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x22401) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)) 01:51:35 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) read$watch_queue(r0, 0x0, 0x4a) 01:51:35 executing program 0: request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)='}\x00', 0xfffffffffffffff9) 01:51:35 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x1, 0x2) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 01:51:35 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreq(r0, 0x0, 0xc, &(0x7f0000000000)={@multicast2, @local={0xac, 0x14, 0x0}}, 0x8) 01:51:36 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d67514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e0fcb3dfd4e70ebec677d6ac14c2c794f72cbf5fe31789e70227bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c8a14195e32f13799d6707432ff48bc085760314166443ce72c74f3db890e1ff15a10d91f27e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd11747ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c79a5d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db269971210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3b3a8abf93b280ea53ce01dcc21b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f919746bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb4000053c3f01ea714a7bd4fad615ff6e2991589bbdd1ae0d1bce65c620c4a2527a82afe16e00101000000000000afba090000c3630488edcc4a8cbd3246e962b773a75b28a51cd09cbcb3577fea6f1e9fe8cd2b532c084cbd051b4aeaf0e7813354f14a453b093948d49bca31a7170419bb1d32f256ff3010e69b2f0482c63ab78a74dec8b19ca76e7fdf29766d96e4c2f57ba917f0abd5253e87fbe5b86a4b9151c316df3925d86899ab3e2036f4866e277d82829165922f8aeb4ea2b9db2dbb6a6b157d4019545e00028d09608ef2e186fd216ce84d913813e1be50f5b6b98d5dab8d5fe3dc100d8b6cf41c29b550f45d68a627db8335fd97bd633694ebb6173d9474c50c0360daa387ba5da3e092463a4c084b57eaff89c0083232b22b321c2af2c686ca2a0000297c8161e5c939855271fe95df690f658da38153646e660e9ba212986cd3628a500d14d378d4af508f428ecb0e85322f9fd317b29ec23b193b1ded2824dc90eeea4c56a676609d2f9e6b925cc413cde5414869387f23a309fe29c7e63101fec34b22aae77bd5df5f6181f5b4639119fc5446893479e7907e2eedfd728963537e45e01cd99203cc1f28fb06e5f5a6c96ef934e800000000000000000000005f093ab4f7a54bed3b7bebb3f8b4e722b9bb802389168bf6422899cb27eeca6fede00a5cb6036baf5d8fe305237b2488305a796cb47206b63824ecf0b16b04a11447c1d2998421bee778cd3b5aa7cefad9f6ac61517dbcfbc37b5d878b51f8dab7b4afa0830c81debe7d5ffa53fbd76ec07a3d431abd8f9ba0a393fbdbd6a982d71962aa67f67b4f09df21d0f0ed09cc31d8c78efcabdec9b693348d55b4389f59a679b4b8489c8155efc4d8d7a4f0b5b846c2b377c0272c9db8d42c866d45c5b56bbd0aee2c5ff16eac7e3494c160a7a039706aa1767a89d1297439e811d6d00f51a3913d09216f51747f18ce7f3e236945ecc5f195580d5f786a7ed3059193d1fed6384f6d6a183beab57fd2e215e9c9b6d73164553cc73a296bbc8382702c6f7edbd89b5c8e5b2ce1919f42f7107b270d4014645a"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x1800000000000060, 0xe, 0x0, &(0x7f0000000100)="280e003f4305607e5bc5795e6558", 0x0, 0x100, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) 01:51:36 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r0, 0x0, 0x0) 01:51:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='net/tcp\x00') syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) 01:51:36 executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x20000000000000a, 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000180)) connect$inet6(r0, &(0x7f000004bfe4)={0xa, 0x0, 0x0, @dev, 0x10000006}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x19, &(0x7f0000e530e9)=""/16, &(0x7f0000000000)=0x170) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000280)=ANY=[@ANYBLOB="ee44e8", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000"]) ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f00000002c0)={0x7, 0x8000000000000001}) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f00000001c0)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'ipvlan1\x00', {}, 0xb6e}) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) ioctl$TIOCSRS485(0xffffffffffffffff, 0x542f, &(0x7f0000000340)={0x1, 0x499, 0xffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 01:51:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000480), 0x0, 0x0) 01:51:36 executing program 0: epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x8) [ 886.345058][T13756] ===================================================== [ 886.345210][T13756] BUG: KMSAN: uninit-value in batadv_get_vid+0x1b2/0x2e0 [ 886.345259][T13756] batadv_get_vid+0x1b2/0x2e0 [ 886.345302][T13756] batadv_interface_tx+0x2f1/0x1e00 [ 886.345480][T13756] xmit_one+0x14e/0x5f0 [ 886.345529][T13756] dev_hard_start_xmit+0xe5/0x370 [ 886.345575][T13756] __dev_queue_xmit+0x1dec/0x31f0 [ 886.345621][T13756] __bpf_redirect+0x1277/0x1430 [ 886.345689][T13756] bpf_clone_redirect+0x324/0x470 [ 886.345732][T13756] ___bpf_prog_run+0x7ed/0xaee0 [ 886.345796][T13756] __bpf_prog_run512+0xc2/0x110 [ 886.345838][T13756] bpf_test_run+0x592/0xd20 [ 886.345906][T13756] bpf_prog_test_run_skb+0x1625/0x20b0 [ 886.345957][T13756] bpf_prog_test_run+0x6a0/0x730 [ 886.346007][T13756] __sys_bpf+0x9e8/0xeb0 [ 886.346053][T13756] __ia32_sys_bpf+0x9c/0xe0 [ 886.346099][T13756] __do_fast_syscall_32+0x95/0xf0 [ 886.346140][T13756] do_fast_syscall_32+0x33/0x70 [ 886.346180][T13756] do_SYSENTER_32+0x1b/0x20 [ 886.346226][T13756] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 886.346296][T13756] [ 886.346303][T13756] Uninit was created at: [ 886.346370][T13756] __kmalloc_node_track_caller+0x86c/0x1230 [ 886.346432][T13756] pskb_expand_head+0x1aa/0x1a00 [ 886.346493][T13756] skb_ensure_writable+0x3ce/0x460 [ 886.346539][T13756] bpf_clone_redirect+0x17b/0x470 [ 886.346581][T13756] ___bpf_prog_run+0x7ed/0xaee0 [ 886.346617][T13756] __bpf_prog_run512+0xc2/0x110 [ 886.346657][T13756] bpf_test_run+0x592/0xd20 [ 886.346701][T13756] bpf_prog_test_run_skb+0x1625/0x20b0 [ 886.346751][T13756] bpf_prog_test_run+0x6a0/0x730 [ 886.346798][T13756] __sys_bpf+0x9e8/0xeb0 [ 886.346841][T13756] __ia32_sys_bpf+0x9c/0xe0 [ 886.346885][T13756] __do_fast_syscall_32+0x95/0xf0 [ 886.346924][T13756] do_fast_syscall_32+0x33/0x70 [ 886.346961][T13756] do_SYSENTER_32+0x1b/0x20 [ 886.346998][T13756] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 886.347063][T13756] [ 886.347072][T13756] CPU: 0 PID: 13756 Comm: syz-executor.5 Not tainted 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 886.347121][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.347147][T13756] ===================================================== [ 886.347160][T13756] Disabling lock debugging due to kernel taint [ 886.347175][T13756] Kernel panic - not syncing: kmsan.panic set ... [ 886.573289][T13756] CPU: 0 PID: 13756 Comm: syz-executor.5 Tainted: G B 5.19.0-rc3-syzkaller-30868-g4b28366af7d9 #0 [ 886.585241][T13756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 886.595419][T13756] Call Trace: [ 886.598726][T13756] [ 886.601681][T13756] dump_stack_lvl+0x1c8/0x256 [ 886.606431][T13756] dump_stack+0x1a/0x1c [ 886.610645][T13756] panic+0x4d3/0xc7d [ 886.614609][T13756] ? print_tainted+0x1d1/0x1e0 [ 886.619468][T13756] ? add_taint+0x104/0x1a0 [ 886.623937][T13756] ? printk_sprint+0x29b/0x4d0 [ 886.628776][T13756] kmsan_report+0x2cc/0x2d0 [ 886.633353][T13756] ? __msan_warning+0x92/0x110 [ 886.638176][T13756] ? batadv_get_vid+0x1b2/0x2e0 [ 886.643076][T13756] ? batadv_interface_tx+0x2f1/0x1e00 [ 886.648511][T13756] ? xmit_one+0x14e/0x5f0 [ 886.652884][T13756] ? dev_hard_start_xmit+0xe5/0x370 [ 886.658134][T13756] ? __dev_queue_xmit+0x1dec/0x31f0 [ 886.663386][T13756] ? __bpf_redirect+0x1277/0x1430 [ 886.668454][T13756] ? bpf_clone_redirect+0x324/0x470 [ 886.673700][T13756] ? ___bpf_prog_run+0x7ed/0xaee0 [ 886.678772][T13756] ? __bpf_prog_run512+0xc2/0x110 [ 886.683840][T13756] ? bpf_test_run+0x592/0xd20 [ 886.688567][T13756] ? bpf_prog_test_run_skb+0x1625/0x20b0 [ 886.694273][T13756] ? bpf_prog_test_run+0x6a0/0x730 [ 886.699442][T13756] ? __sys_bpf+0x9e8/0xeb0 [ 886.703907][T13756] ? __ia32_sys_bpf+0x9c/0xe0 [ 886.708633][T13756] ? __do_fast_syscall_32+0x95/0xf0 [ 886.713878][T13756] ? do_fast_syscall_32+0x33/0x70 [ 886.718957][T13756] ? do_SYSENTER_32+0x1b/0x20 [ 886.723674][T13756] ? entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 886.730257][T13756] ? kernel_text_address+0x11d/0x1a0 [ 886.735609][T13756] ? __kernel_text_address+0x26/0x90 [ 886.740955][T13756] ? unwind_get_return_address+0x5c/0xd0 [ 886.746664][T13756] ? batadv_interface_tx+0xf5/0x1e00 [ 886.752101][T13756] ? filter_irq_stacks+0x5c/0x1a0 [ 886.757247][T13756] ? kmsan_get_metadata+0x33/0x220 [ 886.762413][T13756] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 886.768276][T13756] __msan_warning+0x92/0x110 [ 886.772916][T13756] batadv_get_vid+0x1b2/0x2e0 [ 886.777650][T13756] batadv_interface_tx+0x2f1/0x1e00 [ 886.782914][T13756] ? validate_xmit_xfrm+0x95/0x1ad0 [ 886.788247][T13756] ? batadv_softif_is_valid+0x90/0x90 [ 886.793682][T13756] ? batadv_softif_is_valid+0x90/0x90 [ 886.799130][T13756] xmit_one+0x14e/0x5f0 [ 886.803356][T13756] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 886.809227][T13756] dev_hard_start_xmit+0xe5/0x370 [ 886.814315][T13756] ? kmsan_get_metadata+0x33/0x220 [ 886.819479][T13756] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 886.825343][T13756] __dev_queue_xmit+0x1dec/0x31f0 [ 886.830425][T13756] ? kmsan_get_metadata+0x33/0x220 [ 886.835604][T13756] __bpf_redirect+0x1277/0x1430 [ 886.840509][T13756] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 886.846377][T13756] bpf_clone_redirect+0x324/0x470 [ 886.851457][T13756] ___bpf_prog_run+0x7ed/0xaee0 [ 886.856361][T13756] ? __stack_depot_save+0x21/0x4b0 [ 886.861538][T13756] __bpf_prog_run512+0xc2/0x110 [ 886.866442][T13756] ? should_fail+0x3f/0x810 [ 886.871013][T13756] ? kmsan_get_metadata+0x33/0x220 [ 886.876217][T13756] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 886.882096][T13756] ? __stack_depot_save+0x1b1/0x4b0 [ 886.887354][T13756] ? kmsan_get_metadata+0x33/0x220 [ 886.892517][T13756] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 886.898384][T13756] ? kmsan_get_metadata+0x33/0x220 [ 886.903548][T13756] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 886.909423][T13756] ? kmsan_get_metadata+0x4d/0x220 [ 886.914585][T13756] ? kmsan_get_shadow_origin_ptr+0x9a/0xf0 [ 886.920451][T13756] ? __bpf_prog_run480+0x110/0x110 [ 886.925610][T13756] bpf_test_run+0x592/0xd20 [ 886.930197][T13756] bpf_prog_test_run_skb+0x1625/0x20b0 [ 886.935734][T13756] ? __bpf_prog_test_run_raw_tp+0x380/0x380 [ 886.941720][T13756] bpf_prog_test_run+0x6a0/0x730 [ 886.946719][T13756] __sys_bpf+0x9e8/0xeb0 [ 886.951029][T13756] __ia32_sys_bpf+0x9c/0xe0 [ 886.955587][T13756] __do_fast_syscall_32+0x95/0xf0 [ 886.960659][T13756] do_fast_syscall_32+0x33/0x70 [ 886.965555][T13756] do_SYSENTER_32+0x1b/0x20 [ 886.970098][T13756] entry_SYSENTER_compat_after_hwframe+0x53/0x62 [ 886.976499][T13756] RIP: 0023:0xf7f82549 [ 886.980596][T13756] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 [ 887.000259][T13756] RSP: 002b:00000000f7f7d5cc EFLAGS: 00000296 ORIG_RAX: 0000000000000165 [ 887.008721][T13756] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 0000000020000140 [ 887.016731][T13756] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 887.024734][T13756] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 887.032741][T13756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 887.040744][T13756] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 887.048779][T13756] [ 887.051909][T13756] Kernel Offset: disabled [ 887.056269][T13756] Rebooting in 86400 seconds..